Q on ASUSWRT 5.0, AX86U Pro Guest Network Pro IOT Network

[routerq]

RT-AX86U Pro, Firmware Version:3.0.0.6.102_34336

I setup a Guest Network Pro IOT Network for my Home Automation devices (mainly sensors, bulbs, a few goggle mini / home etc.).

The IOT network has main sub-net, runs on 2.4g network and no VPN or VLAN.

I am getting failure in adding new devices to my tuya app. I see the device but addition fails. Note: the phone with the app is on the Guest IOT Network.

Now I think it many be due to some configurations of the IOT network (like access to intranet etc.) but I don't see those settings for thsi automatically created network. So I am thinking up of setting up a custom guest network. so that I can control all those settings.

Q 1) if I create a Guest Network that has the same setting the current IOT network, will they be same?

OR does the automated Guest IOT Network add some settings/ configurations which are not visible and not set-able on the GUI when I create a custom guest network.

Q2) Is it advisable to run a separate subnet & VLAN for the IOT devices? Internet access but no intranet access.

Q3) Any recommendations on setting up a network for IOT devices

 

[routerq]

I did find some excellence info on the thread: https://www.snbforums.com/threads/understanding-guest-network-pro-iot.86916/

specially the post (thansk @lawk) : : https://www.snbforums.com/threads/understanding-guest-network-pro-iot.86916/post-867288

Still will appreciate any additional info..

 

[visortgw]

RT-AX86U Pro, Firmware Version:3.0.0.6.102_34336

I setup a Guest Network Pro IOT Network for my Home Automation devices (mainly sensors, bulbs, a few goggle mini / home etc.).

The IOT network has main sub-net, runs on 2.4g network and no VPN or VLAN.

I am getting failure in adding new devices to my tuya app. I see the device but addition fails. Note: the phone with the app is on the Guest IOT Network.

Now I think it many be due to some configurations of the IOT network (like access to intranet etc.) but I don't see those settings for thsi automatically created network. So I am thinking up of setting up a custom guest network. so that I can control all those settings.

Q 1) if I create a Guest Network that has the same setting the current IOT network, will they be same?

OR does the automated Guest IOT Network add some settings/ configurations which are not visible and not set-able on the GUI when I create a custom guest network.

Q2) Is it advisable to run a separate subnet & VLAN for the IOT devices? Internet access but no intranet access.

Q3) Any recommendations on setting up a network for IOT devices

A1) Not aware of any additional configuration in the preset.

A2) Absolutely — I suggest as much separation as possible!

A3) Setup based upon personal experience:

• 2.4 GHz only — if you have 5 GHz IoT devices (e.g. some Ring wireless doorbells), set up a separate 5 GHz only network for those devices with settings as below.
• No Intranet access.
• Separate subnet/VLAN.
• Unrestricted DNS provider such as Google (8.8.8.8, 8.8.4.4).
• WPA2-Personal or WPA2/WPA3-Personal.

 

[bbunge]

Setting up a separate guest WIFI for IoT devices is a matter of preference and trust. I gave up guest WIFI as it was getting to be a pain.
Creating a guest WIFI does set up a VLAN and that can be used with wired clients as well as WIFI.
Best to keep IoT devices on WPA2 Personal.