@Yan1245 If I'm not wrong, in standalone it's impossible. You will need the Omada controller, to add multi-nets to the Ipsec rule.

@surfer1 Did you check port 5,7 PVID? They should be 3 And all ports should be untag. Note: VLAN1 should contains all ports including port 5,7

@PROXYTEC I did not run a test but I think you can try stateful ACL. Add a rule to only block TP-Link ER7206 LAN networks to WatchGuard Firewall. I do not have ER7206 right now and my ER605 does not...

@hiveal ER605 (version - 1.2.1) this firmware does not support mDNS repeater. However currently only ER7206 received the update, see this post:...

@8411guy Your test PC is connected to the ER8411 WAN/LAN 10G port? Or to the switch? Could that be the switch slow down the speed? Also if you have time, you can run Iperf to test hardware...

@AmonNascaroth ER7206(or ER605 a cheaper one) is needed, if you only have a home router. Not all routers support multi-net NAT. If you only have the switch, even though you can create VLANs and...