@LAMAGuru Im pretty sure i could build a rule set for all this that fits inside the number of groups that can be made, its not particurlarly complicated or expansive ... but... ONLY if they are...

@MarekZegarek Do you mean you cant reserve the switches address in the controller on vlan3 dhcp pool? Yeah, for some reason you cant do this in the natural way for omada devices - BUT, you can...

I forgot to add there are some security improvements that happen with this approach - You can prevent all WAN IN > Gateway Management Page connections with gateway ACL on the main site to block any...

@Vincent-TP No problem, thanks for moving it! It was difficult to know where exactly to put these!

@AIT90 I forgot to say, the switch rules will prevent any cross vlan that isnt specifically in the allow list. It doesnt matter if the gateway doesnt have matching lan>lan rules, the switch will...

@AIT90 If you want to specify the ports, you will need to adjust what i posted as follows IYou need ONE ip-port group per device with its specific IP as a /32 and port added Make an IP group with...