Wireguard on Guest Networks

[Brenneke]

I have been using YazFi script to set up my different guest networks to use different OVPN clients.
I have read all the posts about getting YazFi to (maybe) work with Wireguard and roughly know about state of Yazfi to date.
High level question:
Is there a way to set up my different guest networks to use different Wireguard VPN clients on RT-AX88U?

Thank you.

 

[bennor]

For reference. The YazFi discussion topic in the Addon's subforum

YazFi - YazFi v4.4.9 [2025-Nov-08] - Enhanced AsusWRT-Merlin Guest WiFi Networks

Release Notes for YazFi v4.4.6 production release now available [2025-May-29] The fork from @Jack Yaz's repository is now hosted on the AMTM-OSR GitHub repo: https://github.com/AMTM-OSR/YazFi 1) FIXED: Problem where setting the "Allow Internet Access" option to "NO" was causing problems with...

www.snbforums.com

In that discussion there are several posts asking about and referencing Wireguard. See posts 19, 20 and 21.
And a post I made last year about routing YazFi through Wireguard:

YazFi - Can't make Yazfi working with Wireguard

First of all, here is my current spec. AX86U running on 3004.388.8_4 YazFi v4.4.4 I know by default Yazfi is not working with Wireguard because of its firewall rules. After doing extensive search, I found I can make custom firewall rules for Yazfi to work with Wireguard. I tried but it...

www.snbforums.com

It was doable in my quick and dirty testing but required creating a custom scripting file to set some IP Table rules. And it required setting up some VPN Director rules.

 

[Brenneke]

Is this something that can be more easily done on DD-WRT?

 

[CaptainSTX]

Is this something that can be more easily done on DD-WRT?

If you want easy consider buying an AX86 Pro or AX88 Pro. Using Merlin's firmware on my AX88 Pro I run three WG VPN clients one for devices connecting to the main LAN and then the two additional WG clients are used for two separate guest networks.

 

[Brenneke]

If you want easy consider buying an AX86 Pro or AX88 Pro. Using Merlin's firmware on my AX88 Pro I run three WG VPN clients one for devices connecting to the main LAN and then the two additional WG clients are used for two separate guest networks.

I did try some things in the past and read then that pro models have more capabilities with respect to guest networks yes.

If I was to spend money on another router however, I would go away from Merlin altogether and get into something that can take more full-featured FW with respect to this.

I am surprised that nobody with the dev skills (not me) has seen the need for a script that would be the Wireguard equivalent to YazFi for OVPN. Why has the popularity and need for such a script now suddenly dropped since WG has become the new norm for VPN?

 

[degrub]

lack of horsepower in the box for OV for one.

 

[CaptainSTX]

I did try some things in the past and read then that pro models have more capabilities with respect to guest networks yes.

If I was to spend money on another router however, I would go away from Merlin altogether and get into something that can take more full-featured FW with respect to this.

I am surprised that nobody with the dev skills (not me) has seen the need for a script that would be the Wireguard equivalent to YazFi for OVPN. Why has the popularity and need for such a script now suddenly dropped since WG has become the new norm for VPN?

Each to his own but I can't think of any additional feature(s)/ functionality that the current VLAN functionality needs. I suppose it could be useful if it supported 802.1Q VLANs so you could run multiple VLANs between the router and an AP or node over a single Ethernet drop but that requires compatible hardware on both ends.

 

[John Adler]

If you want easy consider buying an AX86 Pro or AX88 Pro. Using Merlin's firmware on my AX88 Pro I run three WG VPN clients one for devices connecting to the main LAN and then the two additional WG clients are used for two separate guest networks.

Hi, I have the AX86Pro and totally frustrated, since days trying to get a DDNS from Asus with no success, so Wire Guard is a dream for me.

 

[CaptainSTX]

Hi, I have the AX86Pro and totally frustrated, since days trying to get a DDNS from Asus with no success, so Wire Guard is a dream for me.

That is unfortunate. I have a DDNS from ASUS and have no problems connecting remotely to my router using either its Open VPN server or its WG server. In addition, I run three WG clients.

While some posters have reported issues with ASUS DDNS I have never had an issue on this router or prior ASUS routers using the DDNS service they provide.

 

[bennor]

Hi, I have the AX86Pro and totally frustrated, since days trying to get a DDNS from Asus with no success, so Wire Guard is a dream for me.

Why not use an alternate DDNS provider? No issues using the free No-IP.com as DDNS with Wireguard, server or client. Just have to deal with the 30 day email nag from No-IP to reup the free DDNS account. PS: On a RT-AX86U Pro running Asuswrt-Merlin 3006.102.6.

 

[bennor]

I am surprised that nobody with the dev skills (not me) has seen the need for a script that would be the Wireguard equivalent to YazFi for OVPN. Why has the popularity and need for such a script now suddenly dropped since WG has become the new norm for VPN?

The original YazFi developer (Jack Yaz) stopped development of YazFi back in 2022. It wasn't until relatively recently that user Martinski took up supporting the occasional maintenance of YazFi and several other discontinued scripts. At the time YazFi was created OpenVPN was the main VPN of choice. For a good while routers had questionable hardware power to properly service WireGuard. So why bother trying to support something a number of the Asus-Merlin firmware supported routers couldn't adequately support? With YazFi not currently supported under 3006.102.x firmware and that firmware's Guest Network Pro feature having a number of YazFi type features, its understandable that further development of YazFi might have slowed as Asus moves forward with new routers on the 3006.102.x firmware track and moving older routers to EOL status.

If you really want YazFi to support WireGuard then ask @Martinski their views on the possibility of adding WireGuard to YazFi. THere may be specific reasons (time, effort, money, Wireguard supported routers, etc.) why such support has not been added to YazFi. Otherwise you'll have to try the workaround(s) suggested previously up thread. Or get off the bench and try coding YazFi yourself to include WireGuard support. Shrugs.

 

[Brenneke]

The original YazFi developer (Jack Yaz) stopped development of YazFi back in 2022. It wasn't until relatively recently that user Martinski took up supporting the occasional maintenance of YazFi and several other discontinued scripts. At the time YazFi was created OpenVPN was the main VPN of choice. For a good while routers had questionable hardware power to properly service WireGuard. So why bother trying to support something a number of the Asus-Merlin firmware supported routers couldn't adequately support? With YazFi not currently supported under 3006.102.x firmware and that firmware's Guest Network Pro feature having a number of YazFi type features, its understandable that further development of YazFi might have slowed as Asus moves forward with new routers on the 3006.102.x firmware track and moving older routers to EOL status.

If you really want YazFi to support WireGuard then ask @Martinski their views on the possibility of adding WireGuard to YazFi. THere may be specific reasons (time, effort, money, Wireguard supported routers, etc.) why such support has not been added to YazFi. Otherwise you'll have to try the workaround(s) suggested previously up thread. Or get off the bench and try coding YazFi yourself to include WireGuard support. Shrugs.

Not sure why you would suggest asking @Martinski when he already told you this:

Please note that the original developer (Jack Yaz) apparently is no longer actively developing YazFi per this link:

User @Martinski has occasionally performed some some modifications to YazFi that is available via the YazFi Developer branch, perhaps they may be able to offer some suggestions to your question(s).

Sorry to say, but I cannot help. I don't subscribe to any commercial VPN providers & I don't have any VPN clients set up on my own router. The only VPN Servers I currently use are from the company I work for & the ones on ASUS routers (mine & those from relatives & friends for maintenance purposes) so that I can connect remotely when needed using my work PC or my personal PCs/tablets/phones. The bottom line is that I'm not in a position where I can test & validate any changes made in the YazFi code regarding OpenVPN or Wireguard clients.

 

[bennor]

Not sure why you would suggest asking @Martinski when he already told you this:

Uh because he made that reply on Sep 25, 2023. More than two years ago. Things may have changed since then. In any event, why not inquire with him to see if he has any suggestions since he's the one maintaining YazFi at the movement. Shrugs.

 

[bennor]

Another person started a post in the Addons subform about WireGuard & YazFi.

YazFi guest networks stop working when changing DNS or using VPN

My router is the GT-AX11000 and firmware is 3004.388.10_2_rog Firstly, I will preface by saying like an idiot I tried to change the default IP to 192.168.1.1 unaware that this would cause issues with YazFi. I changed it back and the guest networks began to work again. The issue I have now is...

www.snbforums.com

They too were apparently able to get WireGuard working with YazFi by following the previously mentioned post's steps. See their post #2 in the above link.