Isolate LAN device from other devices

[Shino]

I want to isolate a device connected to LAN from other devices, but the AX86U GUI does not have this feature. I noticed that there is a way to use ebtables, but it doesn't seem to work?

ebtables -A FORWARD -i eth1 -o br0 -j DROP

 

[bennor]

Sounds like you want VLAN. Do a search for VLAN to find some past discussion on various attempts to create VLAN's to isolate wired LAN clients. Example:
https://www.snbforums.com/search/1238102/?q=vlan&o=relevance
https://www.snbforums.com/search/1238100/?q=vlan&t=post&c[child_nodes]=1&c[nodes][0]=42&o=relevance

If one has a WRT5.0 3006.x supported Asus router they can try Guest Network Pro/VLAN feature found in the 3006.x firmware.

 

[Shino]

Sounds like you want VLAN. Do a search for VLAN to find some past discussion on various attempts to create VLAN's to isolate wired LAN clients. Example:
https://www.snbforums.com/search/1238102/?q=vlan&o=relevance
https://www.snbforums.com/search/1238100/?q=vlan&t=post&c[child_nodes]=1&c[nodes][0]=42&o=relevance

If one has a WRT5.0 3006.x supported Asus router they can try Guest Network Pro/VLAN feature found in the 3006.x firmware.

I know VLAN can achieve this feature, but AX86U does not provide it. I just need to isolate the devices, so I hope the method is as simple as possible.

 

[bennor]

I know VLAN can achieve this feature, but AX86U does not provide it. I just need to isolate the devices, so I hope the method is as simple as possible.

Per the search links previous provided is the following discussion on using VLAN's on non Pro series routers:

Tutorial - How to use VLANs on your non-pro Asus router with 386 or 388 code (no scripting required)

With 386 and 388 code base, you can make use of two built in VLANs (plus the main LAN VLAN 1) to further segment your wired and wireless network, even on non-pro models. This definitely works in router mode on all models that support AIMESH and these code versions. From what I have seen (but...

www.snbforums.com