YazFi guest network clients not using YazFi subnet

[amoney]

Asus Router RT-AC88U: Merlin 386.2
AirMesh Node RT-AC68U: 3.0.0.4.386_41634-g08f88ae
YazFi: v4.2.0

Not sure when this started happening, i just happened to notice it after i applied the 386.2 update. What i found some times is that clients on guest network get the 192.168.1.0/24 subnet. YazFI is configured to use 192.168.2.0/24 (2.4GHz) and 192.168.5.0/24 (5GHz).

If i bound the client to the main router then it would get the correct subnet and ip on the device confirmed that (however the UI still shows the IP addr in 192.168.1.0/24 subnet.) and yazfi cli shows it as a connected client. If the client was bound to the airmesh node ip shown on the device was in 192.168.1.0/24 subnet and i could see dns queries from this device showing up in my local dns server which guest network does not have access to.

I have seen this happen with a couple of devices that always connect to guest network and sometimes they get the ip in the correct subnet and some times they do not.

I have also tried restarting the router and the airmesh node and it did not help. I was curious if any one else has seen this? and if any one has any pointers on how i could fix this.

 

[Jack Yaz]

YazFi doesn't work on Aimesh nodes. The guest network on the node will be unrestricted

 

[amoney]

YazFi doesn't work on Aimesh nodes. The guest network on the node will be unrestricted

ah ok that explains why i saw this behavior. I understand with 386.x you could have guest networks use airmesh as well. Will look into how i can disable airmesh for guest network.

 

[Jack Yaz]

ah ok that explains why i saw this behavior. I understand with 386.x you could have guest networks use airmesh as well. Will look into how i can disable airmesh for guest network.

it's something i want to add, but there's too many issues with guest syncing (protocol is buggy in logs, packet loss etc.) and i dont want to add anything until Asus have fixed it

 

[Bigdesaster]

Hi,
is it possible to force guest networks using yazfi to use AiMesh-Master?

 

[robertofelix]

@Bigdesaster go to Guest Network settings, select the Guest Network you may have and you Router Only. You will restrict the Guest Network only to the Aimesh Router, the Aimesh nodes won't propagate the Guest ones.

 

[Bigdesaster]

Thank you robertofelix,
but this setting is only available for guest_1.
I need 2 guest networks with this option

 

[L&LD]

I'm sure Asus will be working on that when they get the 1st guest network bulletproof.

Coming soon to a router near you.

 

[iraweissman]

it's something i want to add, but there's too many issues with guest syncing (protocol is buggy in logs, packet loss etc.) and i dont want to add anything until Asus have fixed it

Hey Jack I'm one of the many waiting for this feature. Where would be the best place to check from time to time to see if it's been released? GitHub?

Thanks for everything!

 

[Bohdan]

For folks who need no-intranet guest network with internet routed through VPN client on all AiMesh nodes, I found a solution. It does not use YazFi.

My prerequisites:

• RT-AX86S as main AiMesh router, fw 386.7_2
• Three nodes, one running Merlin, others stock, all connected to the main router directly with ethernet cables

Solution, in a nutshell:

1. Setup VPN Director rules to route guest net clients to internet via VPN.
2. Add firewall forwarding rule to allow guest subnet to communicate with VPN client subnet.
3. Change DNS from router IP to some public service IP for guest net.

Posted detailed instructions on reddit:

https://www.reddit.com/r/Asus_Merlin/comments/vqkjxg/_/il849av