Splitting port via VLANs on AX88U Pro?

[AlexP11223]

Hi, I am still struggling to figure out how to make a basic router-on-a-stick setup as described in https://www.snbforums.com/threads/r...-ax88u-pro-and-ubiquiti-flex-mini-2-5g.93175/
In short, I want to have modem -> managed switch -> router, and several other devices (PC, TV, IoT hubs) connected via other ports on the switch and the router.

So, as I understood so far, the main thing is to
- Create a new VLAN (vlan2).
- Set the modem->switch port to be only for vlan2.
- For the switch->router port, there are probably several approaches, I guess the simplest one (when not planning to isolate things further with VLANs) is just letting everything to pass through: default vlan1 as untagged, vlan2 as tagged. That is all other ports will just remain vlan1.

And then on the router I need to kind of split the WAN port into two virtual ports.
Looks like it is not possible via the VLAN UI ( https://www.asus.com/support/faq/1049415/ )?

So as I understand I need to do that via SSH, and this process is not well documented yet for the new models without robocfg support.

I have read the great work by @LeandroBR https://www.snbforums.com/threads/rt-86u-vlanctl-ethctl-usage-puzzle.54375/#post-581747 about vlanctl (and I guess simpler ip link) but I don't fully understand it and it's about a bit older models.
So does anyone know if what I want to achieve is possible with AX88U Pro (with the latest Merlin)?
Is there maybe any examples implementing a scenario like this?

Also it says that HW Switching must be disabled (ethswctl -c hw-switching -o disable).
Any ideas how much does it affect performance? e.g. will I still be able to achieve 2.5G on a PC connected to the router?

 

[bennor]

@AlexP11223, are you running Asus-Merlin firmware on the RT-AX88U Pro? If so which version?

 

[AlexP11223]

@AlexP11223, are you running Asus-Merlin firmware on the RT-AX88U Pro? If so which version?

did not receive it yet Planning to install the latest stable Merlin, so I guess 3004_388.8_4.

 

[AlexP11223]

Looks like I managed to do that

I put this into the services-start script

#!/bin/sh

# create a new virtual port for WAN, when VLAN id == 2
ip link add link eth0 name eth0.2 type vlan id 2

ifconfig eth0.2 up

# not sure if actually needed, just copied from the LeandroBR post
brctl stp br0 on

# add the original port (for untagged) into the bridge with all other LAN ports
brctl addif br0 eth0

# replace all WAN port references with the new virtual port,
# and add the original port into the lists of LAN ports
# not sure if all of these changes actually affect anything
nvram set wan0_ifname=eth0.2
nvram set wan_ifname=eth0.2
nvram set wan_ifnames=eth0.2
nvram set lan_ifnames="eth0 eth1 eth2 eth3 eth4 eth5 eth6 eth7"
nvram set br0_ifnames="eth0 eth1 eth2 eth3 eth4 eth5 eth6 eth7"
nvram set wired_ifnames="eth0 eth1 eth2 eth3 eth4 eth5"
nvram set w2_ifnames="eth0 eth1 eth2 eth3 eth4 eth5"
nvram set sdn_ifnames="eth0 eth1 eth2 eth3 eth4 eth5"

nvram commit
killall eapd
eapd

For some reason ethswctl -c hw-switching -o disable does not work for me (prints "Failure") but looks like it is not needed in this case.