If it doesn't support merlin you can't use a script but you can go into the CLI and change the NVRAM variable and reboot, or just run the WL command to shut it off.
My router is totally different architecture than yours so I don't know the specific commands or variables, they may be the same...
It definitely enables AP isolation, at least on every firmware I've run on my router. Only way to override is with a script, or Yazfi.
No idea why it was working for OP before. A bug, or possibly previously used Yazfi and isolation never got re-enabled until now, etc.
Yes I was assuming an SNAT due to most printers having front panel scan to PC etc functions. If DNAT is sufficient (printing only, no warnings about out of paper or ink levels, etc), then that will work. But you still need to get the second subnet and routing working.
I still think OP is...
If the SDK can't run WMM correctly and is thus limited to B and G, I guess I consider that end of life, at least that's how I interpreted what you said previously.
I'm not sure how iptables handles static NATs but usually a 1:1 nat will NAT return traffic (stateless) so once a client starts pointing to the new IP it would break the connection and not work, as it will still NAT one direction. Policy based NAT can overcome that but it gets complex. Maybe...
From what was said earlier in this thread, Tasmota (the subject of this discussion) are old devices being kept alive by volunteers.
My router is not EOL, nor does that have anything to do with it handling IOT well, if anything it would handle it worse.
Better to use a PC for speed tests, the internal test can be problematic. On that router maybe not as much but still best to avoid it for the most accurate results.
Yes keep bluetooth as far away from your 2.4 wifi as possible, however since you're using 5ghz band for this, it shouldn't matter...
It won't work because when you go update your clients, the NAT rule you put in place will break the connectivity to the new IP, the return traffic gets NAT'd back to the old 192.168.1.x still. There is probably some complex policy based NAT or routing you could try and do, but why not just go...
My old AC defaults to two different ones but obviously that's irrelevant since it has no smart connect. Honestly who cares what the default is. It does work well for many/most scenarios. I do have a TP link AC router with their version of smart connect and during initial setup it gives you...
It seems like a no-name brand but you have to assume that things have changed in 20 years. Many routers had far worse security back then, most relying solely on hide NAT with no DPI firewall at all.
Since you're running merlin firmware there is an addon called "channelhog" and a few other similar scripts that when they detect the radio has dropped to 80mhz they bump it back to 160. However you might be able to get stable 160 by trying other channels (depending what channels are in your...
Ah didn't catch that part, yes just use USB tethering as the router supports it by default. Unfortunately the phone you're using for your WAN connection cannot be used for anything LAN, it is one or the other, so yeah use a spare phone to set up thermostat etc and just leave WiFi on the "wan...
Depends how much you have customized. Take screenshots and paste sequentially into MS word or similar, and/or copy and paste what you can text wise, it isn't too bad and you may notice a lot of other stuff working better too. Sometimes it is a great way to review the things you've customized...
You definitely want to be able to use 5ghz. Maybe time to reset everything. Or try rebooting after disabling AP isolation as I believe it doesn't totally clear out until you do.
There are commands you can run via SSH to see status of isolation and enable/disable it if you want to go that deep...
I don't have experience with that brand but if you've forwarded the necessary ports to the console, and the console is showing open NAT, you've done what you need to do. The firewall (assuming it is doing packet inspection) is still involved, unless you disable it completely but that's not...