Guest Networks on Asus Routers

[L&LD]

A few questions for this great forum.


Guest Networks on Asus Routers


1) Do the three Guest (1 to 3) accounts on each band have equal access to the bandwidth, or are certain accounts more preferred/restricted than others?

2) Can a specific Guest account be bandwidth restricted?

3) Are guests isolated from each other (is this configurable)?

4) Can Guest accounts be made part of the same guest network between bands (i.e. the clients can see and share with each other, one being on the 2.4GHz band and the other on the 5GHz band)?

5) Can wired resources (printers, nas) be made available to Guest accounts but still have Guests restricted from other devices on the wired and Main Wireless network?

6) Can Parental restrictions (time controls) handle entire Guest accounts, instead of individual devices?


What I am envisioning is:

Main Wireless: full access to anything wired or wireless, no restrictions.

Guest WL1: An actual Guest account with Internet only capability, throttled to ~1Mbps - put on a time schedule (let's say, business hours only, M-F).

Guest WL2: Guest Vendor account with Internet throttled to ~3Mbps, specific NAS and specific printer accessibility on a timed schedule (let's say 10AM to 2PM only, M-F).

Guest WL3: Guest VIP account with Internet throttled to ~10Mbps, able to share and see with other VIP guest users, but no access to wired resources on a timed schedule (let's say business hours, M-F).


Is any of the above possible?

Are multiple routers the answer, or is a vlan capable switch with AP's instead?

Any links to tutorials or other ideas welcome.



Thank you for your time and all answers and/or suggestions.

 

[Wisiwyg]

Did you ever get an answer to this? I'm trying to look for a way to make an internal networked (have wireless and wired available) printer available to the Guest network that does not have internal network access. Note the Asus RT-AC68R is operating in AP mode and something else is serving DHCP. TIA

 

[sinshiva]

Did you ever get an answer to this? I'm trying to look for a way to make an internal networked (have wireless and wired available) printer available to the Guest network that does not have internal network access. Note the Asus RT-AC68R is operating in AP mode and something else is serving DHCP. TIA

all the separation of the guest networks is handled via ebtables. to open up access will require modification and then saving to a script.

this is via the 'broute' table, iirc.

particularly, ebtables -t broute -L BROUTING - to show you what you are working with. this controls flow between interfaces on the bridge, essentially