@dononeil go to ACL and then select gateway ACL

@dononeil you can create two deny rules wan/in SOURCE IP Group:IPGroup_Any destination IP Group:IPGroup_Any wan/in SOURCE IP Group:IPGroup_Any destination Gateway Management Page

@tony.young4650 if you do not enable the gateway, the SSID will not be broadcast on the router. if you enable EAP and Gateway, the SSID is broadcast on the Access point and gateway

@jbreu You can set up SD-WAN, then Wireguard will have full access to all sites

@tony.young4650 Have you enabled gateway on SSID configuration? if not you have to delete SSID and recreate with gateway enabled.

@Lokee There is a beta version that you can find here. https://community.tp-link.com/en/business/forum/topic/604386 I'm actually a little irritated about this access point that was EOL before it even...