@jra11500 - thank you for the detailed explanation. Unfortunately that feature only works if the router is doing the vlan routing. Which is not the case for me - for performance reasons I'm doing...

I'm struggling with gateway, switch and eap type of acl rules. I'm trying to find a way of isolating 2 vlans from the rest. Meaning only internet traffic is allowed for these 2 vlans. For that I have...

@GRL - which probably means that the isolation only works for packets passing the Omada gateway? Meaning that if a L3 switch is involved with IP-interfaces in all vlans this feature has no effect?...

@GRL - ok - great. But it seems only available when an Omada router is "hosting" a given vlan/subnet? Meaning if it is "hosted" by an external device - for example pihole - it doesn't show?

Team, Within the (v)lan settings, there is an advanced section with the option called "Isolate Network". What is exactly is the effect when this is enabled? With warm regards - Will

@GRL - this was indeed the case. I removed the lacp config - which revealed the "real" port profile. Once all related ports changed to a new port profile I could delete this one. Thanks for the hint...