Hi @GRL, currently I've solved this ACL issue by creating VLAN without DHCP server (is completely independent from anything) and installing an virtual pfSense routing firewall which allows such...

no one knows the answer?

hi TP-Link, as Omada gateways are OpenWRT based, I have question: are they using nftables as firewall engine or still iptables?

Hi @Vincent-TP, thank you for the perfect table. just one small question: where can I find list of open open connections to the internet via NAT)? something like on my ISP provided Zyxel xDSL router:...

Hi @Ethan-TP, first of all I'll suggest to focus on more granular ACL options like mentioned here: "ACL - allow access to single IP in another VLAN" If this is solved, the VLAN remains in gateway...

Hi @GRL and all, yesterday I replaced the SD-WAN with WireGuard site2site tunnel - all is working fine, all networks can be configured and routed through. conclusion: SD-WAN is fine option and easy...