@IanCC I can't think of any other way to do this, so your sketch looks good. as an alternative, you can create a separate site for the paid network with only access point in, and if you need an...

@IanCC I'm guessing it will work. I would put routers and switches in different sites. you can only have one router in each site. but all the access points must be in the same site. they must also be...

@satelite you can choose IDS only or IPS user agent try Google :-)

@nwr Yes you can, BUT!!! you can not use IP port group or IP group on gateway ACL Between VLAN. for example, if you block LAN A to LAN B you cant open port9100 for print. At first I thought it was a...

@Enmanuelrp30 ok, so you use OpenVPN, unfortunately TP-Link aren't that good at OpenVPN, there's a lot of weirdness there.. unfortunately it's not possible to use fqdn on OpenVPN. you can use it on...

@Enmanuelrp30 do you have a screen shot of your vpn config? are we talking site to site vpn is config like that, and have always been, notting new now