VPN fusion and guest network pro

[Jherb]

Hello, I'm using an AX86 Pro on stock firmware.
I am not sure how to achieve the below:
I want to set up a guest wifi network that sends all connected clients through a VPN. But the other networks shouldn't use the VPN.

What I am seeing is that when I set up the VPN fusion, I have to select the devices impacted because if I select, "apply to all devices" than the VPN becomes the default connection regardless of which WIFI is connected to. If I don't select devices in VPN fusion, than the VPN guest wifi network doesn't send anything through the VPN.

Is there a way to set it up so that all devices on a given wifi SSID use the VPN without having to change the default connection for every other network, and without selecting specific devices for the VPN?
Hope that can make some sense. Is what I want to do possible?

 

[CaptainSTX]

Hello, I'm using an AX86 Pro on stock firmware.
I am not sure how to achieve the below:
I want to set up a guest wifi network that sends all connected clients through a VPN. But the other networks shouldn't use the VPN.

What I am seeing is that when I set up the VPN fusion, I have to select the devices impacted because if I select, "apply to all devices" than the VPN becomes the default connection regardless of which WIFI is connected to. If I don't select devices in VPN fusion, than the VPN guest wifi network doesn't send anything through the VPN.

Is there a way to set it up so that all devices on a given wifi SSID use the VPN without having to change the default connection for every other network, and without selecting specific devices for the VPN?
Hope that can make some sense. Is what I want to do possible?

On stock firmware not sure what your options are. On Merlin very simple. Use the guest network network1. Guest network 1 will by default be in a different subnet that your main networks and guest networks other than 1. In my setup guest network 1 is 192.168.101.0/24. Then using the VPN Director I just set a rule directing that all device's in the 192.168.101.0/24 subnet use a VPN client either OpenVPN or WireGuard.

Check and see if this will work with stock firmware.

 

[bennor]

I want to set up a guest wifi network that sends all connected clients through a VPN.

Have you tried using the Guest Network Pro > VPN Network option?

[Guest Network Pro] How to set up VPN Network? | Official Support | ASUS Global

Edit to add: This assumes one is using the 3.0.0.6.102_x Asus firmware on their RT-AX86U Pro.

 

[Jherb]

Have you tried using the Guest Network Pro > VPN Network option?

[Guest Network Pro] How to set up VPN Network? | Official Support | ASUS Global

Edit to add: This assumes one is using the 3.0.0.6.102_x Asus firmware on their RT-AX86U Pro.

Yes, I'm using guest network pro with 3.0.0.6 with Guest Network Pro > VPN Network option.

What seems to be happening is that the wifi network does redirect to the VPN fusion, but if the device isn't actually selected, its not using the VPN.
The below is a screenshot from the vpn fusion webpage. If you select Apply to all devices, it affects all wifi networks. So you appear to be forced to have to select devices for the VPN to function, even through the VPN guest network pro. Am I doing something wrong?

 

[bennor]

If you select Apply to all devices, it affects all wifi networks.

Of course it will apply to all devices. That is it's intended function. Why are you enabling that option under VPN Fusion?

The way it should work is that any WiFi client that connects to the Guest Network Pro VPN Network SSID should be on the VPN tunnel that one created and assigned to the Guest Network Pro VPN Network entry. All other devices should not be running through that VPN tunnel unless one specifically enables them to do so, or enables the VPN Fusion's "Apply to all devices".

I just did a quick and dirty test on my RT-AX86U Pro running 3.0.0.6.102_34336. I setup a VPN Network under Guest Network Pro. Assigned one of my VPN Client entries (for the free ProtonVPN) to it. Then connected a WiFi client to that WiFi VPN network. The WiFI client is running through the VPN tunnel while all the rest of my network clients do not. I did not even go to the VPN Fusion page and I didn't need to make any adjustments to VPN Fusion.

 

[Jherb]

Of course it will apply to all devices. That is it's intended function. Why are you enabling that option under VPN Fusion?

I am not enabling it, I was just testing. That setting makes the default internet connection be the VPN, for every wifi network and all devices. I thought because guest network pro allowed you to choose VPN connection, that there was a way to set up the VPN without making it default. Just have it active, but nothing routing through it until a specific WIFI is connected to.

The way it should work is that any WiFi client that connects to the Guest Network Pro VPN Network SSID should be on the VPN tunnel that one created and assigned to the Guest Network Pro VPN Network entry. All other devices should not be running through that VPN tunnel unless one specifically enables them to do so, or enables the VPN Fusion's "Apply to all devices".

So if you have no devices selected in the VPN fusion page, does the guest network pro client still go through the VPN tunnel? Its not working like that for me. I simply want all devices connected to a specific wifi to go through the tunnel. I'm trying to avoid having to manually activate each device on the VPN fusion page.
Hope that makes sense.

I just did a quick and dirty test on my RT-AX86U Pro running 3.0.0.6.102_34336. I setup a VPN Network under Guest Network Pro. Assigned one of my VPN Client entries (for the free ProtonVPN) to it. Then connected a WiFi client to that WiFi VPN network. The WiFI client is running through the VPN tunnel while all the rest of my network clients do not. I did not even go to teh VPN Fusion page and I didn't need to make any adjustments to it.

On your VPN fusion page, is the device you tested toggled on?

Thanks for the reply.

 

[bennor]

@Jherb, attached are some images of what I see on my end with a Guest Network Pro > VPN Network setup. I do not see the Guest Network VPN Network WiFi client listed on the VPN Fusion page. That client however IS listed under the Guest Network Pro VPN Network Client section as indicated in one of the attached images. The VPN Network client is running through the VPN tunnel, my other LAN/wireless clients connected to other WiFi SSID's on the router are not. The Guest Network Pro - VPN Network feature is working, as expected, for me.

For my setup I have two VPN Fusion entries (both for ProtonVPN). One of them is enabled and assigned to the Guest Network Pro VPN Network in my test.
Post edited to replace initial VPN Fusion attachment with larger image showing entire VPN Fusion page.

 

[Jherb]

Thank you. If its working for you, then something must be off on my end. I'll have to tinker some more.

I really appreciate your response and taking the time to test on your end. I'm glad there is a way to do it, so now I can troubleshoot my end.

Thanks again