ROG GT-AX6000 IoT WiFi with special requirements

[tomahawk5000]

Hi All,
My router is Asus ROG GT-AX6000 with latest original AsusWRT software.

Is there a way to create a separate WiFi for my IoT devices (mostly Xiaomi) with:
1. No access to intranet (it's possible - I know that)
AND
2. Access from intranet to separated WiFi - allowed (no idea how to do that)
AND
3. Assigned IP address for devices from separated WiFi (I think it's possible on Merlin but not sure)

Currently I'm on latest original AsusWRT software (as mentioned) but if necessary I will switch to Merlin.

Hope my requirements are clear.
Thank you all in advance
Tomek

 

[bbunge]

Your firmware version should be 3.0.0.6.102_34876. This is pretty much the same as the Asus Pro firmware and has a Guest Network. You can set up a Guest WIFI for your IoT devices. If the Guest Network does not say "Pro" you may have to set up a Guest WIFI for each WIFI band (2.4 GHz and 5 GHz). Asus recommends using the iOS or Android app to set up a Guest WIFI.
You do not need the Merlin firmware to do what you want to do.

 

[tomahawk5000]

I have IoT network (guest pro) but this network has access to the intranet

Need access from intranet to IoT network
IoT network doesn't have access to intranet
IoT network must have IP address assigned by me

 

[bennor]

Is there a way to create a separate WiFi for my IoT devices (mostly Xiaomi) with:
1. No access to intranet (it's possible - I know that)

Yes, just create the IoT Guest Network Pro profile with the option Use same subnet as main network disabled. The IoT profile will then create a seperate subnet range from the main LAN. Insure, if the option is available in the Guest Network Pro profile, that Access Intranet is disabled.

AND

2. Access from intranet to separated WiFi - allowed (no idea how to do that)

If you are asking about creating a second IoT Guest Network Pro profile that has acess to/from the main LAN, then create the second IoT profile and set Use same subnet as main network to enable. You can then manually reserve IoT Guest Network Pro client device addresses normally through the LAN > DHCP Server section.

AND
3. Assigned IP address for devices from separated WiFi (I think it's possible on Merlin but not sure)

If you set the Guest Network Pro profile option Use same subnet as main network to disable; you will need to check if your IoT Guest Network Pro profile has an option under it's Advanced Settings to manually assign IP addresses to the clients on the Guest Network Pro profile. That option may be called Manually assign IP address around the DHCP list. If that option is not available then you likely would need to use the Asus-Merlin firmware and possibly the YazDHCP addon script to manually assign.

 

[tomahawk5000]

Yes, just create the IoT Guest Network Pro profile with the option Use same subnet as main network disabled. The IoT profile will then create a seperate subnet range from the main LAN. Insure, if the option is available in the Guest Network Pro profile, that Access Intranet is disabled.

If you are asking about creating a second IoT Guest Network Pro profile that has acess to/from the main LAN, then create the second IoT profile and set Use same subnet as main network to enable. You can then manually reserve IoT Guest Network Pro client device addresses normally through the LAN > DHCP Server section.

If you set the Guest Network Pro profile option Use same subnet as main network to disable; you will need to check if your IoT Guest Network Pro profile has an option under it's Advanced Settings to manually assign IP addresses to the clients on the Guest Network Pro profile. That option may be called Manually assign IP address around the DHCP list. If that option is not available then you likely would need to use the Asus-Merlin firmware and possibly the YazDHCP addon script to manually assign.

I'm afraid that it's not exactly what I need.
All this 3 conditions I'd like to have implemented in new network.

Isolated network (B), main network (A) = intranet.
1. B without connection to A (easy to implement),
2. A has access to B (one way only, no idea how to do that)
3. B static IP (no idea how to do that, I think that I saw it on Merlin software).

 

[bennor]

I'm afraid that it's not exactly what I need.
All this 3 conditions I'd like to have implemented in new network.

Isolated network (B), main network (A) = intranet.
1. B without connection to A (easy to implement),
2. A has access to B (one way only, no idea how to do that)
3. B static IP (no idea how to do that, I think that I saw it on Merlin software).

For points 2 & 3 you will likely need to use Asus-Merlin firmware. Use the forum search feature to search for past discussions on using IPTables scripting to implement one-way to Guest Network Pro from main LAN. There are a number of past discussions where people have tried to implement similar on the Asus-Merlin 3006.102.x firmware. A few past example discussions on IPtable scripting with Asus-Merlin 3006.102.x firmware:

Trying to understand Guest Network Pro limitations

Using an AX-86U Pro on FW 3006.102.4_beta1, I'm experimenting with Guest Network Pro and VLANs and I must be missing something. I've created a VLAN (tagged as 3) and set ethernet port 3 as an access port tagged with that VLAN. I've then created a new guest network with that same VLAN, turned on...

www.snbforums.com

mDNs / Bonjour / Multicast

Hi everyone, I am having issues with 3 HomePods in my home. I have 2 AirPlay receivers which work flawlessly, however my HomePods are very hit and miss to work, I took one on holiday and noticed it was much better than at home. Are there any settings or things to enable/check to ensure mDNs /...

www.snbforums.com

Using YazDHCP addon script on Asus-Merlin firmware will allow one to set manual IP address reservations for Guest Network Pro clients when one has the Guest Network Pro option Use same subnet as main network set to disable.

YazDHCP - YazDHCP v1.2.4 [2025-Nov-21] - Feature expansion of DHCP assignments (increasing limit on the number of DHCP reservations)

Release Notes for YazDHCP v1.0.8 production version now available [2025-May-29] The fork from @Jack Yaz's repository is now hosted on the AMTM-OSR GitHub repo: https://github.com/AMTM-OSR/YazDHCP 1) FIXED: Errors when loading the webGUI page on the 3006.102.x F/W version. 2) FIXED: Some...

www.snbforums.com

GitHub - AMTM-OSR/YazDHCP: Feature expansion of DHCP assignments using AsusWRT-Merlin's Addons API to read and write DHCP assignments, increasing the limit on the number of reservations.

Feature expansion of DHCP assignments using AsusWRT-Merlin's Addons API to read and write DHCP assignments, increasing the limit on the number of reservations. - AMTM-OSR/YazDHCP

github.com

 

[tomahawk5000]

Maybe it's stupid but works

I have solved this using 2 routers

Second one (connected to first one via LAN (from first router) to WAN(to second router)) more powerful is main and has all devices except IoT devices connected to first route
r.