Hi @FlameOtter 

Thanks for posting in our business forum.

FlameOtter wrote

Trying to isolate each VLAN. I've created an ACL Rule which blocks the VLAN from accessing other VLANs. This seems to work. However, if I block a VLAN from accessing the Gateway Management Page it seems to cut those devices on the VLAN from accessing the internet.

I don't think this is correct. I've tried and tested it many times it does not affect the Internet connectivity. You should check your ACL or other config. This feature definitely works.

Feel free to create a new VLAN and test this ACL only.

Hi @FlameOtter 

Thanks for posting in our business forum.

FlameOtter wrote

 Hello  @Clive_A 

It seems like I tested it out, and only if the deny access to gateway management page is with TCP protocol does it work.

If other protocols are used the internet access is disconnected.

Here is a thread where this person figured out a solution and may help others as well:

 

Management Page Block ACL blocks internet access

https://community.tp-link.com/en/business/forum/topic/642230

 

Thank you so much.

I double-confirmed this with the test team that even if you select protocols = all, you will still have Internet access. It does not affect the Internet connection which also fits what I remembered about this ACL.

Are you able to confirm your statement? Certain about this result? On your model and firmware, can you reproduce it?

Would love to hear from you. If necessary, we might need a backup of your config.

  @Clive_A 

Did you check the post I linked to earlier? Why is there not response there it that solution is incorrect?

I just tested it again? If I turn on All protocols, the device cannot connect. If I select only TCP then the internet works.

I am using the er707-m2 hardware version 1 with firmware version 1.2.2

thank you for your assistance.

the vlan is connected to an access point which is connected to a poe switch that's connected with a trunk port to the er707-m2 router.

Hi @FlameOtter 

Thanks for posting in our business forum.

FlameOtter wrote

  @Clive_A 

Did you check the post I linked to earlier? Why is there not response there it that solution is incorrect?

I just tested it again? If I turn on All protocols, the device cannot connect. If I select only TCP then the internet works.

I am using the er707-m2 hardware version 1 with firmware version 1.2.2

thank you for your assistance.

the vlan is connected to an access point which is connected to a poe switch that's connected with a trunk port to the er707-m2 router.

I know what you wrote. I just need to confirm this because what you said is not what we expect and intend for the Gateway Management Page ACL.

Since you can confirm this, I will take this case to the test team and see if we can get the same result as yours.

That latest controller? Windows or Omada Hardware controller? Do let me know this as we need to test this out.

  @Clive_A 

Thank you so much. This is using the Omada Controller OC200 withv5.13.30.20