No internet access on guest network

[gil80]

Router: RT-AX-88U
Merlin Firmware: 3004.388.9_2
2 AiMesh ZenWiFi XD4 Pro

I have 1 guest network on 2.4GHz for my IoT.
I created a 2nd guest network on the 2.4GHz without a password, limited to 30 minutes, and disabled Intranet access. When I connect to this wifi network, I don't get internet access at all.
---

Given my firmware is 3004.388.9_2, I would expect this issue to be resolved, but that is not the case.

Can someone please verify if this is fixed for them in the latest firmware?

 

[bennor]

According to ChatGPT:

Don't use ChatGPT, as it often gets things wrong when it comes to complex router issues.

Given my firmware is 3004.388.9_2, I would expect this issue to be resolved, but that is not the case.

Is your issue with the main router OR with the AiMesh ZenWiFi XD4 Pro nodes or with both?
Hard to tell from what you have posted, but what actual troubleshooting steps have you tried?
Have you checked to ensure any access internet option is enabled?
Have you tried the guest network without any time based restrictions on it?
Have you rebooted the router and nodes?
It may help others diagnose your issue(s) if you post specific information on how you have AiMesh, WiFi, Guest WiFi, time scheduling, and other router settings configured including any addon scripts you may be running.

 

[gil80]

Is your issue with the main router OR with the AiMesh ZenWiFi XD4 Pro nodes or with both?
Hard to tell from what you have posted, but what actual troubleshooting steps have you tried?
Have you checked to ensure any access internet option is enabled?
Have you tried the guest network without any time based restrictions on it?
Have you rebooted the router and nodes?

Thanks for your reply.

To answer your questions:
1. I didn't block internet connection to anything. I have the 1st guest wifi enabled and that can access the internet.
2. I have tried without time restrictions.
3. I rebooted multiple times.
4. The issue is with the router and the mesh nodes.
I don't have any script running, or at least that I know of.
I don't have time scheduling for anything.

 

[ColinTaylor]

Are you using an alternate DNS server that resides on your LAN, e.g. a PiHole device?

4. The issue is with the router and the mesh nodes.

FYI Isolated guest networks do not propagate to AiMesh nodes. So you just end up with additional access points connected to the primary LAN.

P.S. I suggest you remove the ChatGTP output from your first post. It is mostly factually incorrect or obsolete and having it on the internet just perpetuates this misinformation as it gets repeated over and over again.

 

[gil80]

Are you using an alternate DNS server that resides on your LAN, e.g. a PiHole device?


FYI Isolated guest networks do not propagate to AiMesh nodes. So you just end up with additional access points connected the the primary LAN.

P.S. I suggest you remove the ChatGTP output from your first post. It is mostly factually incorrect or obsolete and having it on the internet just perpetuates this misinformation as it gets repeated over and over again.

yes, I have a pihole device, however, given the 1st guest network works, I see no reason why pihole is an issue with 2nd guest network.

 

[bbunge]

yes, I have a pihole device, however, given the 1st guest network works, I see no reason why pihole is an issue with 2nd guest network.

Do you have the Pi-Hole - Interface Settings - Permit All Origins?

You may be better off to use Diversion on the router, yes you can use a custom blocklist, and let that Guest Network #2 use the router for DNS.

 

[ColinTaylor]

yes, I have a pihole device, however, given the 1st guest network works, I see no reason why pihole is an issue with 2nd guest network.

The first guest network operates differently than the second or third. You have disabled intranet access - your PiHole is on the intranet. If you reenable intranet access can you now connect to the internet?

Can you SSH into your router and post the output of this command:

ebtables -t broute -L --Lc

 

[bennor]

yes, I have a pihole device, however, given the 1st guest network works, I see no reason why pihole is an issue with 2nd guest network.

You may have to ensure the second guest network has intranet access enabled for it to be able to access the Pi-Hole on your local network. Asus (and Asus-Merlin) firmware handles the first Guest Network differently (AiMesh).

If you don't want to enable intranet access on the second guest network the other option with Pi-Hole, depending on what device it's running on, is to connect a second network adapter to the second guest network. For example if the Pi-Hole is running on a Raspberry Pi that has a Ethernet port and WiFi capability, then setup the WiFi on the Pi to access the second guest network and the Ethernet adapter on the Pi to connect to the main LAN network. Then configure the Pi-Hole to respond to requests from both adapters.

Edit to add: And as the previous poster indicated you will likely need to enable Permit All Origins in the Pi-Hole DNS settings.