Best choice for home office with support for several VLANs

I'm looking for a new main router in our home office, but can't decide which one to choose.
Any suggestions?

Main requirements are:

  • support for latest stable release (19.07.6 as we speak)
  • Full support for VLAN (office1, office2, private and guest)
  • Very good and stable wifi support
  • reliable (don't want to reboot every other week)
  • The more connected devices it can handle, the better (several smartphones, tablets, laptops, pc's and servers will be connected all the time)

My shortlist (devices are currently available, though some with a very limited stock):

  1. Linksys MAX-STREAM EA8300 (€ 119)
  2. Linksys MR6350 (€114)
  3. Asus RT-AC85P (€137)
  4. Netgear Nighthawk X4S R7800 (€ 149,00)

My concerns:

  1. has (had?) issues with VLAN support. Not sure what the current status is? (I prefer to configure them via Luci)
  2. Same VLAN issues as 1. No sure about the differences between those 2 devices.
  3. Doesn't support official release, only snapshots? Higher price.
  4. Apparently some devices have/had broken NANDs. Higher price.

You haven't mentioned your WAN speed (nor if QoS/ SQM is needed), which is an essential figure for giving advice. But from that list (and beyond), the r7800 would be in the lead by far - top wlan, no problems with VLANs (although you probably want a managed switch in addition), good for up to 450-550 WAN speed (topping out around 600-650 MBit/s), less if SQM is a requirement.

The WAN speed is currently 300Mbps, but my ISP provides an extra option that gives me 1Gbps which I might consider buying in the future.

QoS isn't that important for me, but SQM might be worth checking out once I have set up the new router.

Is the r7800 significantly different from the WNDR3800 in regards to speed/stability?
I currently use the WNDR3800 as my main router, but it's getting old hence my search for a replacement router.

I went for the R7800 and it arrived yesterday.
Now I want to configure the VLANs similar to how I configured them on my WNDR3800, however this r7800 has an extra CPU and WAN port and it's unclear to me how I should configure the switch in this case.
I understand the R7800 is a dual-core router, which explains the extra cpu, but I have no idea how it fits in the VLAN design. Can/should it be tagged, untagged or off because I already tag cpu0 (cfr screenshot of vlan design on WNDR3800)?
And what about the WAN port? What is this port for (as it was not available on the WNDR3800) and how should I configure it for the VLANs? Tag, untag or off?

The design is like this (4 separate VLANs):

  • LAN:
  • OFFICE1:
  • OFFICE2:
  • GUEST:

Each VLAN should have access to LAN as well as the internet, but OFFICE1, OFFICE2 and GUEST should not be accessible from other VLANs (which is achieved by configuring the necessary firewall zones)

So any advice regarding the cpu1 and WAN port configuration is greatly appreciated.

I added 2 screenshots: 1 of the old WNDR3800 with correctly configured VLANs and one of the new R7800 with default VLANs.

VLANs on old WNDR3800:

VLANs (default) on new R7800:

Ignore CPU (eth1) and WAN (unless you actually want to change the mappings for WAN).

LAN1-4 are wired up to CPU (eth0) and you can follow your WNDR3800 examples.

Yes, technically eth0 and eth1 could be assigned freely, but this doesn't really help you here and would complicate the situation (there are also implicit assumptions, like early boot leakage).

Ok, thanks.

So with ignoring you mean I should turn them off like in the screenshot below?

No, that would disable the WAN port - I don't think that's your intention.

You should ignore CPU (eth1) and WAN in the sense of keeping the settings as they are (well, were) and only modify LAN1-4 and CPU (eth0).

But I can't untag the same LAN port on multiple VLANs so I have to turn the LANs off for CPU (eth1), right?

Like this:

First of all, your WAN VLAN configuration is still broken (both VID 1 and VID 2); I think you'd be well advised to do a factory reset (firstboot) to get back to functional defaults and start over from there.


I don't understand how you come to that conclusion, it's incorrect.

Well, I haven't committed the changes yet, so no need to do a factory reset I guess.

The below screenshot shows the original configuration of the VLANs + extra VLANs added for the setup I need. But as you can see, this causes conflicts with the untagging for VID 1

So it's still unclear how I can "just ignore" the eth1 and WAN in order to achieve the desired setup

By default, VID 2 connects eth0 (tagged) and WAN (untagged), unless you need VLANs (or VLAN tagging) over the WAN port (beyond the default), it's best to leave them alone. In other words, eth0.2 should only be used for WAN.

eth1 and LAN 1-4 are free to use, by keeping eth1 tagged and tagging/ untagging the LAN ports are necessary.

Right, so if I remove VID1 alltogether, then I have the correct setup?

VID 2 for WAN and VID 3-6 for the internal VLANs. Is that correct?
If not, then what do I have to change in the last screenshot to get a working WAN with the 4 VLANs I need?

You would need firewall rules like for your "normal" LAN.

Yeah sure, I'll need firewall rules and zone forwarding and such, as I mentioned in my initial post.
But my main concern is currently regarding the configuration of the switch because I never worked with a multi-core router before.

If you approach it in a simple way, eth0 and WAN are married together (that isn't strictly true, but see caveats above), completely ignore (leave them as they are) them from your configuration. What you end up with are eth1 and lan1-4, you can configure them just like you did before on your previous router (only caveat, VIDs mustn't overlap between eth0/ WAN (so VID 2 is taken) and eth1/ LAN1-4).

1 Like

Apparently I made a stupid mistake in my screenshots :see_no_evil:
CPU (eth1) should be tagged instead of CPU (eth0) and then everything is correct.

For completeness, this is how I finally set up the switch

Thanks for your help @slh