Access control fine, but define per WiFi or stop those rules on Guest, cause now when I've Guest they can't connect cause I've Access control enabled with Allow which I want for Safety on my own Wifi.
In my case I want all enable access on Private WiFi's to be in disable at Guest WiFi, cause with kids this is a handy rule.

I also prefer to have a LAN port to define for IoT or Guest.

I want to push some devices or lock them on a specific accesspoint.

It is based on OpenWRT, so why can't we define VLANs on LAN side?

At DHCP server for Address reserving, add sorting on columns.