Vlan workaround asus router

Betahelix

HI.
My setup is:

Netgate 2100
Asus AX86U.

Would this be possible:
Turn off DNCH on Asus router.

Connect WAN on Asus router to port 1 on pfsense
Connect LAN port on Asus to port 2 on pfsense

Setup route on PFsense to allow normal traffic via LAN-port 2.

Guestnetwork on asus router, will default route via WAN to port1 allowing a gateway around the network to the internet, not allowing LAN access.

I know this is a long shot, but due to no support of VLAN on the asus router, this could be an option to route guest network directly to inet, and no LAN access.

stephenw10

That could work as long as you put the two ports into different subnets in the 2100.

https://docs.netgate.com/pfsense/en/latest/solutions/netgate-2100/switch-overview.html

Steve

johnpoz

@betahelix So this asus router will provide dhcp to its "guest" clients? And then nat it to the network that is on the wan of the asus router?

This could work in theory, but I believe when you disable dhcp on the asus - guest clients wouldn't be able to get an IP.

While I haven't played with whatever latest native firmware you have your asus, I think merlin or tomato firmware might run on them, and that should provide true vlan support..

stephenw10

That would be a much better option if the hardware is supported yet.

johnpoz

@stephenw10 said in Vlan workaround asus router:

if the hardware is supported yet.

Listed on the merlin site

Also show support on asuswrt-merlin

Betahelix

@johnpoz HI.
i have asus merlin on the device, but i cant figure out how to get vlan on it.
I read in forum that it would be possible to bind a vlan to a specific port on the router.

But i dont know how.
It seems like it dont support robocfg which is needed.