@Domada I have had success blocking these with location groups, but using this as the acl WAN IN [location group] > Gateway Management Page This seems to function as a pre-nat blocker in some way and...

@Lyonelle its probably just got ICMP response / ping response disabled

If anyone is looking to set up a bridged vlan like this, but wants different IP pools per vlan, there is a (somewhat) janky way to do this, - you need another router on the network (another omada,...

@Cepheus0815 I forgot to add - there is a mitigation you can put in place with the port forward method..... The controller at host site will happily fully manage the remote sites with only ports...

@Cepheus0815 the main risk of the vpn method is if you mess up the VPN settings or even an ACL setting (that controls host network IP access )on the remote site to the point it CANNOT connect to the...

@Cepheus0815 yes it will carry on as it was configured regardless.