spotlizard wrote so I'd like ALL VLANs to use the Pi Hole in VLAN 1 for their DNS. I have created switch-based ACLs that deny TCP and UDP traffic between each VLAN, so if a device in the IoT VLAN is...

@Thelizardbloke Can you be more specific? Like draw a network diagram so I can tailor the answer to those config. like where is the Omada Controller, the IoT, and the pi-hole in the network diagram?...

@Slapp39 What did the actual log in Alert/Event show? If those packets already dropped, I don't think it's a problem to setup extra ACL to deal with it.

Thelizardbloke wrote Under normal circumstances the VLANs should not have access to each other and I've created ACLs that deny TCP and UDP between the VLANs, so I'm just giving them port access for...

@Clive_A Thank you for the quick, clear and concise response. Make it very easy for me to let my customers know what features I can offer to them when I install Omada devices and NVR system. I...

@Clive_A Should I avoid all the 1xxx (e.g 1008H) if I want web access/management? I noticed that NVR 2016H and NVR 4032H have the web management according to their spec page. Compared to 1008H, it...