Hi All,

Our business has a basic setup, using Omada controller, APs and VLANs for staff, guests, IOT and device management.

We bought some "easy managed" switches and I found it unbelieveable that I could not limit/isolate switch management to a VLAN (TL-SG105E / TL-SG108E How to Block Management VLAN - Business Community). 

So we leveled-up to a SG2016P, yet to be installed. Are there any gotcha's with this switch where VLANs or management interfaces cannot be isolated and leak like the easy managed switches? Is the SG2016P trustworthy enough to run potentially hostile IOT and and trusted internal traffic on separate VLANs, assuming proper configuation?

Thanks