@Me21 I took a closer look at the image you provided at the first post and it shows that the phone is only negotiating to 802.11n, so it must be WPA2. I suggest you try connecting to another WiFi...

@ProSumerTester Deny and Permit do have a colour distinction:

@ITV This is because if you do not set an ACL to prevent communication in both directions, VLAN Interfaces can communicate with each other by default.

@El-Maaloum You can consider the Omada EAP series, where you can choose to use multiple EAPs to achieve network coverage on two floors, and the Omada controller enables centralised management of...

@PascalSBR In this article, it said this issue has been fixed in 1.2.3 version, better to upgrade the firmware to have a try. https://community.tp-link.com/en/business/forum/topic/581548

@ITV You need to first set up an ACL for permit, like the one shown in your picture. You will also need to set another entry for Deny all of Bi-Decrectional as a second ACL.