@MantonL Do you happen to be using firefox?

@NoMadMan If you put omada switches everywhere (not ES switches they dont support it) you can set up 802.1X port authentication so only authorised MAC addresses can authenticate on the port - or you...

@NoMadMan You can disable router ports. Manage the gateway, ports > untick "Enable" on each unused ports

@Collinfranco you also dont need a gateway ACL permitting wan>lan for stuff you have a port forward set up for - it will just pass it through. The ACL might actually interfere

@NoMadMan As long as all your devices and clients are downstream of the switch, you can prevent this in the future by enabling this option in vlan settings

@AndyHarrowven That particular "acess point" isnt vlan aware so you only get one vlan out of it and no central control. There are some inexpensive EAP models that will fully work with Omada