Greetings!
I have been happily using ASUS routers since around 2007, WL-500gP v2, RT-N66U, RT-AC68U, to name a few. My expectations were simple though, mostly sharing the Internet and a NAS storage. Now I am looking for a device that would additionally allow me to securely maintain a home server. The obvious way is of course to forward ports 80 and 443 to a server machine and set up a firewall, which I am easily able to do using an ONT+router device from my ISP (Huawei HG8245Q2). However, I am wondering if it is possible to partially isolate such a server from the rest of the home network. Ideally, I'd like to ping/SSH to it from my main PC yet remain invisible to it. I was thinking about setting up two VLANs, one for trusted devices and the other for the server. My current ONT allows me only to create two independent subnets (without the possibility of assigning Wi-Fi devices to them) and to enable DMZ which is not blocking a server -> home network traffic at all.
I checked a couple of devices like ROG Rapture GT-AX6000, RT-AX86U Pro, RT-AX82U, TUF Gaming AX6000, RT-AX5400, according to the site https://www.asus.com/support/faq/1049415/ it looks like only Pro models support VLAN. A question is, would any of those support this scenario?
