AC87U how to separate wifi with a different vlan/subnet than the lan subnet

[HRV]

Hi everyone,

I have an Asus RT-AC87U with Asus-Merlin ver 380.68_4
I have researched a lot into how to separate the wireless from the lan subnet, and have the wireless at the same time on a different vlan, but all I can find is people asking to use their router as a switch having separate vlans on the ports.
I have seen people using robocfg and vconfig to do this, and I'm not afraid to do the same, I know my way into the cli, but I don't know how to separate the wireless interface wl0.1 or whatever it is.

Can someone please let me know if this is possible?

There has to be a way to do this and then use a separate dnsmasq config file to run the separate subnet for that interface, or for the vlan where this wireless interface will be (if I'm able to separate that wl interface from vlan 1)

Please someone who knows more about this share more info, I will appreciate it a lot!

Thanks.

 

[Martineau]

Can someone please let me know if this is possible?

Use a separate dnsmasq config file to run the separate subnet for that [Guest WiFi] interface

Whilst this is not VLAN separation, I wrote a script to allow a separate Guest WiFi subnet to be assigned

./GuestSubnet.sh -h

#======================================================================================================= © 2016-2017 Martineau, v1.0Xbeta
#
# Configure Guest WiFi with new DHCP subnet and DNS using '/etc/dnsmasq.conf' and optionally allow LAN access to specified IPs
#
# Usage:    GuestSubnet  ['help' | '-h']
#                        {wifi_interface | ssid } | ['del[subnet]'] ['autodnsmasq'] [ 'ssid='name] ['ip='ipaddress[,ipaddress]]
#
#           GuestSubnet  wl0.1
#                        Guest WiFI 2.4GHz interface wl0.1 will have the new DHCP subnet and DNS applied (default)
#           GuestSubnet  wl0.1 del
#                        Guest WiFI 2.4GHz interface wl0.1 firewall rules will be removed but subnet remains.
#           GuestSubnet  wl0.1 delsubnet
#                        Guest WiFI 2.4GHz interface wl0.1 firewall rules will be removed and subnet will be reset to Asus default.
#           GuestSubnet  wl0.2 autodnsmasq
#                        Guest WiFi 2.4GHz interface wl0.2 will have new DHCP and DNS directives inserted into /jffs/configs/dnsmasq.conf.add
#                        if they don't already exist.
#                        NOTE: dnsmasq will be bounced.
#           GuestSubnet  wl1.2 ip=192.168.1.99,192.168.1.100
#                        Guest WiFi 5GHz interface wl1.2 will allow access to LAN devices 192.168.1.99,192.168.1.100
#           GuestSubnet  Guest242
#                        Guest WiFI SSID 'Guest242' (possibly wl0.2?) will have the new DHCP subnet and DNS applied
#
# /jffs/configs/dnsmasq.conf.add:
#
# e.g.
#
# 2.4GHz Guest #1 uses DHCP pool 192.168.241.2 - 192.168.241.20 and OpenDNS/Google DNS
#        interface=wl0.1
#        dhcp-range=wl0.1,192.168.241.2,192.168.241.20,255.255.255.0,21600s
#        dhcp-option=wl0.1,3,192.168.241.1
#        dhcp-option=wl0.1,6,208.67.220.220,8.8.8.8
#
# and will be included in /'etc/dnsmasq.conf' by command 'service restart_dnsmasq' and @boot time etc.

If you are willing to be a beta tester GuestSubnet.sh script
e.g.

./GuestSubnet.sh wl0.2

(GuestSubnet.sh): 1401 ***ERROR Guest Wifi SSID: xxxxxx (wl0.2) not defined in '/etc/dnsmasq.conf' - use 'autodnsmasq' command arg

./GuestSubnet.sh wl0.2 autodnsmasq ssid=G242

(GuestSubnet.sh): 1517 Guest WiFi 2.4GHz Client 2 New SSID: G242 (wl0.2) 10.88.242.0/24 subnet created, using DNS 208.67.220.220,8.8.8.8