WiFi guest subnet and scripts

[DarkSNet]

Hi everyone, I’m new here and thank you.

I have an Asus ROG GT-AX6000 running Merlin 3006.102.5.
My main network is on IP address 192.168.2.1. I’ve created a separate network for IoT using the “Guest Network Pro” section, on the 192.168.54.1 subnet.

I’d like to route traffic from the IoT network to reach my scripts that are already running on the main network, while keeping the IoT subnet isolated. I’ve tried everything I could think of, but I can’t get it to work.
Is there a way to do this?

Thanks a lot.

 

[Tech9]

my scripts

What exactly scripts?

 

[DarkSNet]

What exactly scripts?

I’m using Skynet, Unbound, and Diversion on my main network, and I want to make sure that the IoT subnet is also routed through and covered by them.

 

[Tech9]

Then check the respective scripts support threads and the compatibility and configuration specifics in 3006 firmware.

 

[bennor]

Is there a way to do this?

If you have not done so already, use the search feature to find the past discussions on trying to get Guest Network Pro clients to access the main LAN clients when using 3006 firmware. There are a number of discussions with varying degrees of success. Some past discussion links:

Trying to understand Guest Network Pro limitations

Using an AX-86U Pro on FW 3006.102.4_beta1, I'm experimenting with Guest Network Pro and VLANs and I must be missing something. I've created a VLAN (tagged as 3) and set ethernet port 3 as an access port tagged with that VLAN. I've then created a new guest network with that same VLAN, turned on...

www.snbforums.com

Iptables functionality on 3006.102.4

Dirty upgrade from 3004 to 3006.102.4 on my AX88u-Pro a couple days ago. All looked good so far, except I have some iptables rules in firewall-start that do not seem to work anymore. One set of rules dnat'd any DNS other than those in the cleanbrowsing ranges. Ie, if a device used any...

www.snbforums.com

Allowing main network to access guest networks

Hi everyone, Running on the 3006 firmware version, I have 3 guest networks that are isolated from everything. I'd like to have the main network (192.168.0.0/24 on br0) be able to reach one-way to those 3 guest subnets. I currently achieve this with a firewall-start script that runs the...

www.snbforums.com

Setting up IoT networks using 3006 firmware?

If I understand the new 3006 IoT networks correctly: when using the same VLAN as the main network, devices on the main network (PCs, phones, tablets) can see IoT devices (and vice versa) when using a different VLAN than the main network, devices on the main network cannot see IoT devices (and...

www.snbforums.com

mDNs / Bonjour / Multicast

Hi everyone, I am having issues with 3 HomePods in my home. I have 2 AirPlay receivers which work flawlessly, however my HomePods are very hit and miss to work, I took one on holiday and noticed it was much better than at home. Are there any settings or things to enable/check to ensure mDNs /...

www.snbforums.com

Example scripting using a /jffs/scripts/firewall-start file:
https://www.snbforums.com/threads/t...st-network-pro-limitations.94438/#post-952345

Bottom line, some are finding that when they set the Guest Network Pro option Use same subnet as main network to disable/off that the Guest Network Pro option Access Intranet doesn't work properly. Some are resorting to using a firewall-start script to allow traffic to flow between Guest Network Pro clients and the main LAN clients. If one is trying to get Guest Network Pro clients to use a DNS server located on the main LAN, they can use DNS Director's Guest Network Pro profiles to set local network DNS resolvers for one's Guest Network Pro Profiles.

And as already indicated, check the Addon subforum for the specific addon script discussions to see if there are special settings needed for Guest Network Pro clients on 3006 firmware, and to ask questions to the developers of those scripts. Example:

Diversion - [SOLVED] Diversion Guest Network Pro - blocklist applied to multiple SSID

Does Diversion work with Guest Network Pro Profiles / Vlan? If yes, is there any additional configuration outside of what the Diversion script does? Reason I ask is, it appears Diversion works as expected for the Wireless Network SSID (Main Network), but not for the additional SSID / VLAN...

www.snbforums.com

RT-BE88U 3006.102.2 - Guest and IoT Networks KO after installing Diversion / Skynet

Hello. I recently switched an AX-88U Pro with a BE88U. I'm using latest 3006.102.2_2 firmware. I configured two networks (Guest plus IoT) and successfully configured them. They were working. After installing Diversion and Skynet, guest network and IoT one stopped working. Nevertheless on the...

www.snbforums.com