1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.
Dismiss Notice

Welcome To SNBForums

SNBForums is a community for anyone who wants to learn about or discuss the latest in wireless routers, network storage and the ins and outs of building and maintaining a small network.

If you'd like to post a question, simply register and have at it!

While you're at it, please check out SmallNetBuilder for product reviews and our famous Router Charts, Ranker and plenty more!

Asus Merlin: Guest Network with VPN

Discussion in 'Asuswrt-Merlin' started by Stef09, May 25, 2020.

  1. Stef09

    Stef09 New Around Here

    Joined:
    May 15, 2020
    Messages:
    4
    Hello everyone, I really appreciate all the information that is on SNB and appreciate all the work.
    I am relatively new to this, and I have been struggling on it for a couple of weeks, maybe someone might be able to help. Apologies if this has been asked before.
    I have installed Merlin, Entware, installed and set up YazFi, Set up the VPN and it works correctly. It has taken me a long time and lots of trials and errors but have found that these have not fully helped me.
    I'm trying to set up "2" networks:
    - 2.4 and 5Ghz Wifi that is connected normally
    - 2.4 and 5Ghz Guest Wifi that is connected through VPN

    I tried using YazFi and managed to set it up. When I activate the VPN, both the normal Wifi and the guest Wifi connect through the VPN. Similarly if the VPN is not enabled, then neither network is. However I only want the Guest Wifi to have the VPN while the normal Wifi to not be connected through the VPN.

    I have looked into the Github wiki (https://github.com/RMerl/asuswrt-me...or-VPN-and-SSID-for-Regular-ISP-using-OpenVPN) and the script is a bit too hard for me. I wouldn't know which lines to change or if the optional settings need to be included.

    I have looked into this post `https://www.snbforums.com/threads/2...-ssid-how-to-route-traffic.41222/#post-349086` but I'm not sure it is still valid.

    These are the settings I currently have, is there anything wrong here?
     

    Attached Files:

  2. SomeWhereOverTheRainBow

    SomeWhereOverTheRainBow Very Senior Member

    Joined:
    Jun 4, 2019
    Messages:
    1,225
    What version of firmware are you on?
     
    Stef09 likes this.
  3. SomeWhereOverTheRainBow

    SomeWhereOverTheRainBow Very Senior Member

    Joined:
    Jun 4, 2019
    Messages:
    1,225
    you have to be running merlin on a firmware that supports policy based routing.
    upload_2020-5-25_23-6-13.png
    You need to change your policy rules to strict and then reapply the guest wifi settings.

    otherwise you need to look at this guide that shows the manual method of policy routing.
    https://github.com/RMerl/asuswrt-merlin.ng/wiki/Policy-based-routing-(manual-method)
     
    Stef09 likes this.
  4. SomeWhereOverTheRainBow

    SomeWhereOverTheRainBow Very Senior Member

    Joined:
    Jun 4, 2019
    Messages:
    1,225
    Guest network should look like this when you hit apply.

    upload_2020-5-25_23-14-33.png
    redirect all to VPN option is strictly for that guest network.
     
    Stef09 likes this.
  5. Stef09

    Stef09 New Around Here

    Joined:
    May 15, 2020
    Messages:
    4

    Your settings are in fact correct. I have applied them and the guest network works perfectly.
    (Firmware Version: 384.13_8 for an RT-AC87R)
    Thank you @SomeWhereOverTheRainBow.

    N.B.: For those who are having a hard time understanding how to install YazFi and Entware, this guide has been very useful.
    https://www.snbforums.com/threads/amtm-step-by-step-install-guide-l-ld.56237/
    To connect you don't necessarily need PuTTY. Simply type into your Terminal: `ssh [email protected]`. Might seem trivial, but it was useful since I don't have Windows or Linux.
     
  6. SomeWhereOverTheRainBow

    SomeWhereOverTheRainBow Very Senior Member

    Joined:
    Jun 4, 2019
    Messages:
    1,225
    @Stef09
    Sure thing. If anything else comes up and you need more help feel free to ask me, the forum, the Yazfi thread specializes in Yazfi Guest Networking @ https://www.snbforums.com/threads/y...-merlin-guest-wifi-inc-ssid-vpn-client.45924/ by @Jack Yaz , or you can even check out x3mrouting for more VPN policy routing ideas @ https://www.snbforums.com/threads/x3mrouting-selective-routing-for-asuswrt-merlin-firmware.57793/ by @Xentrk
     
    TechTinkerer and L&LD like this.