Glad you got it working for the vlan. You can block a single client by putting their IP address into an IPgroup and blocking that group from IPGroup_any.

@TheWookie Not sure what is wrong, but I have several gateway ACL's blocking WAN access to vlans and ipgroups. You may want to post a screen shot of the your ACL.

Try writing a Gateway deny ACL from your vlan or groups to destination IPGroup_any. This should work for vlans and ipgroups, but probably not for mac groups.

I thought a firmware update was scheduled in August for the OC200 / OC300 controllers. Has it been released or is there a new estimated release date?

@Bruce_A Correct, multi-lan is only available in stand-alone mode for the the 7206 and 605 routers. Not sure when or if it will be added to controller mode.

@HSJ Not sure why it is called "WLAN Schedule" as it is really a "SSID Schedule". An EAP schedule is available in the standalone EAP configuration UI or if you have an Omada compatible poe switch,...