RT-AC68U vlans in AP mode?

[JimS]

Over the years have added a pfsense box and recently a managed switch (Dlink) to the home network. I have the RT-AC68U as an AP (have two of them in mesh to cover more area). Running latest Asus firmware. Would like to have a guest wifi isolated from main network. I can enable guest network but it all goes on main network. Just getting started on vlans and have only done some reading. Have installed ddwrt on a few routers years ago but no scripting or advanced experience. I could press an older really basic router into service as the guest wifi AP on a port of the switch (which as I understand it would then go by trunk to pfsense). But it looks like it might be possible to use the RT-AC68U with vlan to accomplish this. Have read that AP mode may not automatically create vlan tagging like other modes. Can anyone confirm either way? How would I check this that's better than just set up my switch with vlan and see if it works. If I am needing to do scripts or command line config I need to read up on how to do that. I could load Merlin but it seems that doesn't really add to vlan capability.

 

[bennor]

The following may or may not be relevant to what you seek.

Tutorial - How to use VLANs on your non-pro Asus router with 386 or 388 code (no scripting required)

With 386 and 388 code base, you can make use of two built in VLANs (plus the main LAN VLAN 1) to further segment your wired and wireless network, even on non-pro models. This definitely works in router mode on all models that support AIMESH and these code versions. From what I have seen (but...

www.snbforums.com

 

[JimS]

I

The following may or may not be relevant to what you seek.

Tutorial - How to use VLANs on your non-pro Asus router with 386 or 388 code (no scripting required)

With 386 and 388 code base, you can make use of two built in VLANs (plus the main LAN VLAN 1) to further segment your wired and wireless network, even on non-pro models. This definitely works in router mode on all models that support AIMESH and these code versions. From what I have seen (but...

www.snbforums.com

I had read through that but still left with the same questions. First msg states "From what I have seen (but haven't tried), it does NOT work in standalone AP mode, you will not have the option to enable LAN isolation (and thus create the VLANs) but still need 100% confirmation on that." So I am trying to verify if that works as that's exactly the thing I am wanting to do (AP mode). I see in msg 34 someone states it works but after some discussion the same person says it won't work. So I am left to try this myself and wondering if there is a way to easily view if packets include tagging. It sounds like I might mirror a port on the switch and use wireshark but I have zero experience with that so it's another rabbit hole to go down. I am also wondering about the code posted in msg 39 and how that was viewed.