Tutorial: N66U VLAN creation and isolation

[jpsimos]

Here is how to setup an isolated VLAN on an Asus N66U:

In this example, I will be created a VLAN called `vlan4` and isolating ethernet port number 2 from the rest of devices on the LAN. This is good if you have a server on your network and don't want it to trojan the rest of your network.

Create this script and run it:

This post will help you alot if you are dedicated.

 

[Nullity]

Thanks!

Why not add some configurable variables with read line or positional params so that users can add any ethernet port(s) of their choosing to a vlan of their choice?

Edit: Posting the actual text would be much more convenient and less error prone for those interested in the script.

 

[Martineau]

Thanks!

Why not add some configurable variables with read line or positional params so that users can add any ethernet port(s) of their choosing to a vlan of their choice?

Edit: Posting the actual text would be much more convenient and less error prone for those interested in the script.

As per this year old post!

NOTE: This example creates VLAN10 and explicitly accommodates internet access.

http://www.snbforums.com/threads/fo...guest-network-for-asus-merlin-rt-ac68u.18969/

 

[Etz]

NOTE: RT-AC68 maps the CPU to a different port (5) rather than 8

Are you sure?
Mine seems to have CPU mapped to 8

 

[Martineau]

Are you sure?
Mine seems to have CPU mapped to 8

Indeed it does!.. my point was that robocfg scripts are dependent on the model, as the CPU is/was mapped 'inconsistently'

 

[Etz]

my point was that robocfg scripts are dependent on the model, as the CPU is/was mapped 'inconsistently'

Then RT-AC87U would be better example, on that it is 7

But you can actully make script aware of this, so instead of static value, you could actually detect it by examining where is vlan on WAN port connected and how.

And fairly easily as vlan2 is (in all cases on Broadcom I know), always vlan2 and cpu port is always in last column by default:

robocfg show | grep vlan2 | awk '{ print $NF }'

 

[jpsimos]

This post was specifically for the N66U because nobody explained how to do it for that exact model. The CPU is mapped to port 8 on it and that (along with other fun stuff) was the purpose for this post