I forgot to add there are some security improvements that happen with this approach - You can prevent all WAN IN > Gateway Management Page connections with gateway ACL on the main site to block any...

@Vincent-TP No problem, thanks for moving it! It was difficult to know where exactly to put these!

@AIT90 I forgot to say, the switch rules will prevent any cross vlan that isnt specifically in the allow list. It doesnt matter if the gateway doesnt have matching lan>lan rules, the switch will...

@AIT90 If you want to specify the ports, you will need to adjust what i posted as follows IYou need ONE ip-port group per device with its specific IP as a /32 and port added Make an IP group with...

@AIT90 This will limit inter-commuication to exaclt wht you specify. If you want to limit the individual ports per IP pair thats a LOT more rules. This set will limit IP pairing to exact IPs only IP...

@Konnan Nope, you can only setup access rules for EAPs when using any form of controller. Do you not have a spare PC you could install the software controller on? or even buy the small OC200 / 220 ?...