@Fae Thank you for looking into this. We all are here to help make product better so that customers are happy and you can sell in larger numbers :). As to the broken template, someone started...

Thanks @R1D2. I fully support your request for the re-intriduction of client isolation.If this was alerady a feature and was taken away to offer a strippred down version, then code already exists for...

@R1D2 you are correct as always. I did not pay attention and thought EAP ACL is doing some kind of local ACLs to force all clients to tunnel their traffic thru controller and hence will achieve this...

@R1D2 I dont find any difference with and without Guest network. In both cases, I do have client isolation. I have a rule that permits TCP with source of Guest SSID and destination of an IP group...

@R1D2 The solution works based on your ACL based approach. Basically, I had to disable Guest Network under SSID and then used this ACL to allow access to MT (and the IP of the Splash page server...

Again this will not resolve the issue of needing an external portal page at centralized site, with an AP at each site. Mikrotik based solution requires L2, so it cannot be used at a central site or...