@HuntyBadger if you have connected switch port 17, 19, 20, 23, 25, 26 to router port 8, 9, 10, 11, 2, 3 you are probably asking for problems, what is the point of that?

@sambamcunningha Ok, so you want to block WAN public ip for everyone exept for those who are going to VPN or do you want to block traffic that is inside the VPN tunnel? it would be easier if you...

@sambamcunningha it suddenly became a bit unclear to me what kind of vpn tunnel you have, you say ipsec vpn so I assumed it was site-to-site ipsec vpn. maybe you can explain in more detail what kind...

@Benjamin_Werner

@Benjamin_Werner You can find all these settings in site settings and Wireless Features

@Benjamin_Werner if you have enabled channel limit, EAP225-Outdoor will not be able to mesh with anything below ch100, you should also enable Full-Sector DFS