@AngelK I misunderstood your ask. What you really need is to make the IOT network a 'guest' network....ie they can get to the internet but not see each other, or any other local subnets. Then from...

@AngelK To do what you want, you need a Router+Switch which are managed (but you have that). So see below, left side would be the IOT subnet and right Side would be your client network(s). This is a...

@AngelK Use Policy Routing. You don't need the 'reverse' that's only when you want isolation.

@jaymac1 FWIW, here's my working client config for a very similar setup to you: [Interface] PrivateKey = XXX= Address = 10.8.0.4/24 <--this no doubt comes from a setting on the WG server, each new WG...

@Intense I believe the guts of the all-in-one routers roughly correspond as below ER605-->ER7212 ER7206-->ER8411 As I said, as long as you aren't doing crazy amounts of encryption, you should be...

@jaymac1 Sorry for the confusion, the 192.168.2.2 was simply the example used in part of the web article I pasted. I also apologize because as I patiently wait for the ER605 1.2.3 load, I am running...