@Tedd404 Like described in my initial post: I would like to create a network where I have to control the communication behaviour: 1. hosts shall not reach any other VLAN 2. hosts shall not reach the...

@d0ugmac1 Hi. My setup is: OC200 ER7206 SG3428 SG2218P Every device is on the newest available firmware

And again its me .... The concept of TP-Link is a bit strange to me, thats why I'm asking a lot. Hope this is okay... Hope it will hepl other people. My problem: I have severa networks defined: I...

@Tedd404 10.0.0.0/29 is the hole network. correct. and yes, of course are my hosts/servers inside this range.

@Tedd404 What do you mean I messed up with the subnets? My MGMT subnet is a /28 and my DMZ subnet is a /29 network. Thats correct.

@Virgo I followed the guide to isolate all hosts inside this VLAN from each other. But it seems that then no exception works. Now I found a way by using "port isolation" which works perfectly :-)