1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.
Dismiss Notice

Welcome To SNBForums

SNBForums is a community for anyone who wants to learn about or discuss the latest in wireless routers, network storage and the ins and outs of building and maintaining a small network.

If you'd like to post a question, simply register and have at it!

While you're at it, please check out SmallNetBuilder for product reviews and our famous Router Charts, Ranker and plenty more!

Can OpenVPN for a specific VLAN be implemented w/ Merlin?

Discussion in 'Asuswrt-Merlin' started by daedex, Jan 22, 2020.

  1. daedex

    daedex Occasional Visitor

    Joined:
    Aug 6, 2019
    Messages:
    16
    As the title suggests, I have this question before I pull the trigger on a RT-AC66U.

    Edit: I said VLAN, but as colin pointed out below, I didnt realize i do not need VLANS.

    The ultimate goal is such:
    • OpenVPN specific for one SSID, say guest wifi: All devices connected to this wifi network will egress through OpenVPN
    • All other SSID's egress normally through ISP
    Question 1: can this be accomplished with just one router?
    Because, In my mind, I was thinking that since I already have an RT-AX88U, I need another router, so I was going to purchase a RT-AC66U, throw merlin on it, and connect the WAN port on the 66U to a switch port on the 88U. Then have the OpenVPN configuration files setup on the 66U (the nitty gritty details are still fuzzy to me, so these are my attempted broad strokes).

    Has anyone attempted this? Would this work? I am finding nada on google regarding this question, so I would like to ask this community.



    Any advice is appreciated.
     
    Last edited: Jan 22, 2020
  2. L&LD

    L&LD Part of the Furniture

    Joined:
    Dec 9, 2013
    Messages:
    11,002
    What are your performance requirements for this OpenVPN connection?

    The RT-AC66U will make for a very poor VPN appliance if your ISP speeds are greater than about 25Mbps up/down (symmetrical).
     
    a5m likes this.
  3. daedex

    daedex Occasional Visitor

    Joined:
    Aug 6, 2019
    Messages:
    16

    Hmmm i hadnt thought of that. But for the scope of the project, assume performance requirements are limited to trivial web browsing (not including streaming).
     
    L&LD likes this.
  4. ColinTaylor

    ColinTaylor Part of the Furniture

    Joined:
    Mar 31, 2014
    Messages:
    10,687
    Location:
    UK
    Do you really mean VLANs? Asus' firmware doesn't support VLANs.
     
  5. L&LD

    L&LD Part of the Furniture

    Joined:
    Dec 9, 2013
    Messages:
    11,002
  6. daedex

    daedex Occasional Visitor

    Joined:
    Aug 6, 2019
    Messages:
    16
    Sorry, I should have clarified, i saw some scripts and had assumed merlin allows VPN's, but if I am wrong about that, then this question is moot.
     
  7. ColinTaylor

    ColinTaylor Part of the Furniture

    Joined:
    Mar 31, 2014
    Messages:
    10,687
    Location:
    UK
    There are some hackish scripts that attempt to create VLANs but your original post seems more concerned with guest WiFi and VPN routing. There's nothing in it particularly related to VLANs.
     
    daedex likes this.
  8. L&LD

    L&LD Part of the Furniture

    Joined:
    Dec 9, 2013
    Messages:
    11,002
    @daedex, did you see the link in post 5 above?
     
    daedex likes this.
  9. daedex

    daedex Occasional Visitor

    Joined:
    Aug 6, 2019
    Messages:
    16
    You are absolutely right. okay, so i updated my initial post and my bullet points to reflect the "ultimate goal"

    I correlated in my mind that doing this would require different VLANS.
     
    L&LD likes this.
  10. daedex

    daedex Occasional Visitor

    Joined:
    Aug 6, 2019
    Messages:
    16
    I did. I am reading it and will attempt to test this in the near future, thank you for the support. you and Colin set me straight. I guess the goal will then be to make the guest SSID wifi network route through OpenVPN instead of VLANS
     
    L&LD likes this.
  11. ColinTaylor

    ColinTaylor Part of the Furniture

    Joined:
    Mar 31, 2014
    Messages:
    10,687
    Location:
    UK
    L&LD and daedex like this.
  12. daedex

    daedex Occasional Visitor

    Joined:
    Aug 6, 2019
    Messages:
    16