@AndyHarrowven ER7206 v2, SG2008P switch and a couple Omada access points, maybe EAP650 Outdoor would be fine for this use When you block the starlink IP, its important to only block its GUI ports...

@D-C Agreed - get the basic adoption and trunking working first then expand after. The other thing i just realised You are not using an omada gateway, therefore, in the controller you need to modify...

@yesphun Which bit are you setting? You set the Controller IP here, Global > Settings > Controller Settings NOT here Gloabl > Settings > System Settings - this is for other features and should match...

@Lucek Are you sure your VMs themselves are correctly setting 802.1Q taggng ?

@ticedoff Again, there is no specific recommendation to make. The feature is there for users to decide if they want it or not IDS and IPS is LAN > WAN only, WAN > LAN is not covered as thats all up...

@AndyHarrowven Guest mode wont work because the starlink is the WAN ip and therefore beyond the scope of guest mode blocking (which only blocks within the same vlan and gateway IP) not beyond to WAN...