@MartinUSusUsus 

I disagree with P2 as I want access control on all devices as I put some devices on the guest network that I want more control over them.

  @ArcherC8 I can see your position, and so what 'bandaid' solution would you suggest to meet needs of both, short of doing P1. Tp-Link needs to consider a customer with a large family like mine and kids' friends from elementary through high-school, cousins and parents' friends, all coming in like its a bus station. On average, they come with 2-3 devices, cell, tablets, game pads, laptops for study sessions. 

To me, P2 is essentially a temporary request IFF P1 is going to take over a quarter or longer, for instance.
 

Nonetheless, the most pragmatic option (say P0), considering our needs would be to have two completely independent Access Control lists for Internal and Guests, instead of what the current help suggests the latter being a sub-option of the former. This way, one can enable both & whitelist the internal list whereas they can check peridocally and blacklist the guest list, without the need to be pestered about every single new device.

Any other options that you can think of? Regards,

MG

  @MartinUSusUsus 

I agree that routers should have more control options for whitelists. Asus appears to have a separate whitelist by band (2.4 and 5) which may not work as you may not be able to split your devices by band that need control or not. 
 

One thing that may work is using an extender in your network. Google "tp link extender whitelist" as it appears that it is separate from the routers whitelist.