@Tournas Only guessing here... I would create an IP-Port group with the Tuya device subnet and port 6667 and use it as the source in a Deny ACL. For the destination, I would try IPGroup_Any to see...

@Cyberwasp As @GRL pointed out, if you decide to configure the NAS ports into a LAG group, you need to select Balance XOR (as shown below) instead of the default setting.

@Cyberwasp What type of VLANs do you have configured on the switch (MTU, port based, or 802.1Q)? Creating a LAG group on ports 2 and 3 should not affect port 5 unless something else is misconfigured.

In testing the Tools for switches and access points, one of the options available is Network Check. In the Network Check window one of the options is DNS Lookup. Entering a domain name with a common...

GuWen wrote @jra11500 OK. Thanks, jra11500, for your fast answer. That means it is necessary to do an separate entry for all devices and I can't use the "client-name" from device-configuration....

@GuWen Here is an example: In the Apply to LAN field, select the VLANs that will use the LAN DNS entry. The first time you access the entry with your browser, you might have to use...