Yeah you're right. I mean I tried the ACLs like you said before I made the post, but I forget to do it bi-directional so it didn't work so all request where going to the GW but were not coming back...

Oh that indeed make sense

Well it dosent work :.( My ACLs: Network "Guest" >> Permit >> IP Group "Guest GW" (10.10.50.1/32) Network "Guest" >> Deny >> Network "Guest", Network "LAN", Network "Intern" I cant ping all three...

I cant do that, because I dont have a gateway controlled by this controller.

@MR.S So you mean like this?

Hello! I want to create a network in which clients cannot access other clients in the network but have access to the internet. So similar to a guest wifi but not in wifi but in wired form via a...