ASUS RT-N66U use VLAN's

[StevenG]

Only if you enable it on the lan access screen, by default it should not be able to do that, as far as I know anyway.

Getting closer...with version 99, I have the guest wifi working properly now, with encryption. Yay! The guest wifi is built as another wireless connected to br1. VLAN3 connects to br1.

What I don't get is why I can still access the router's IP from the guest wifi. I want to block this...all other IPs on the br0 subnet are not accessible...

Any ideas on this one last piece?

Thank you

 

[drinkingbird]

Getting closer...with version 99, I have the guest wifi working properly now, with encryption. Yay! The guest wifi is built as another wireless connected to br1. VLAN3 connects to br1.

What I don't get is why I can still access the router's IP from the guest wifi. I want to block this...all other IPs on the br0 subnet are not accessible...

Any ideas on this one last piece?

Thank you

Which IP, the BR0 or BR1? BR1 will be accessible since that's in VLAN3, if BR0 is accessible, you should be able to use a firewall rule or something to block it.

While they are in separate VLANs, the BR interfaces are sort of virtual interfaces so not any hardware separation between them per se. I would investigate the firewall portion and see if you can block it there (deny guest subnet -> BR0 IP or the whole subnet to be safe). Can't say for sure it will work but there must be some firewall betwen them since it blocks the rest of the subnet from talking.

 

[StevenG]

Thank you. Yes, br1 devices can access only the router IP on br0. That's it. They can't access other devices. So I just want to block any requests from br1 to the router IP. I'll look at firewall rules. This is exactly how the Asus firmware behaved too, when guest networks were on, but denied access to the LAN. You could still access the router.

Thanks for your help.

 

[StevenG]

Geez, no matter what I try in access restrictions, I can't seem to block br1 IPs from getting to the router IP on br0.

 

[tompson]

Originally Posted by StevenG
Getting closer...with version 99, I have the guest wifi working properly now, with encryption. Yay! The guest wifi is built as another wireless connected to br1. VLAN3 connects to br1.

I have done the same configuration...
What is strange here is that in QOS > View Details I cannot see all the traffic related to br1
The only traffic that I can see is from router (10.0.0.1:53) to client (10.0.0.x:y) answer to DNS requests.
Nothing else for all the remaining traffic.

Do you have the same behaviour?
Any solution to that?

Thanks

I'm running 1.28.0000 MIPSR2-102 K26 USB AIO-64K on N66U

 

[StevenG]

I don't use QOS, so I can't help. Sorry.