Best way to implement Vlan

[Woodymakespizza]

Hey all, I need some help. I have two Asus GT-AXE11000s, not pro models set up with ethernet backhaul as Router and AP, and a growing homelab with a plex server, DNS/PiHole (firewall to come). I am working on isolating my IOT and outdoor cameras and its my understanding that these dont handle Vlan tagging easily or maybe at all. I have a Trendnet TEG-3182WS managed switch that can create the vlans. This is my first real foray into this kind of networking and Im wondering if there is a firmware I could use to manage tagging, or if there is not, what if them both as mesh or APs under a newer model that does support Vlan tagging, or would it be better to look to replace them both with newer hardware. I'd of course prefer not to replace them both if I dont have to.

Open to suggestions, thoughts or ideas I havent thought of. Thanks.

 

[bennor]

If you don't need VLAN's you can likely accomplish some of what you seek by using Asus-Merlin firmware coupled with the Asus-Merlin YazFi addon script followed by some IPtables scripting if YazFi's One-Way or Two-Way to Guest doesn't work for your setup.

Or one can try the following with the Asus-Merlin 388.x firmware:

Tutorial - How to use VLANs on your non-pro Asus router with 386 or 388 code (no scripting required)

You didn't answer whether the satellite routers are in Mesh or AP mode. Aimesh parent is in AP mode, satellite routers are in Aimesh node mode off the parent.

www.snbforums.com

 

[Woodymakespizza]

Ill poke through these. My long term goal is to separate for both security and convenience somewhat like this:
Primary network - Laptops, business and gaming computers, and homelab
Roku's - vlan 10
Cameras and MyQ - vlan 20
Guest Network - House is a double and I have tenants - Also VLAN?

You'll have to forgive me Im still learning VLANs and some of this deeper network config stuff