Hi,

I do not know how to do what I want and specifically how to set up what I want with ER605. I also do not know about VLANs.

What I want is to prevent IoT devices from being able to do anything to other devices on internal network. For example, I have a Roborock vacuum cleaner and I don't want anyone to exploit it to be able to do something within my network. I also don't want Roborock knowing anything about my internal network. I can't simply block access of the vacuum cleaner to Internet or block specific ports since that completely disables the ability to control the robot remotely.

What I have is that vacuum cleaner and few other devices I want to isolate all connected to same 2.4 GHz wifi network on one wireless router. There are few other devices on same 2.4 GHz network that I do not want to isolate. Same wireless router also has 5 GHz wifi network. Same wireless router acts only as a switch, it has no DHCP, it is just connected to one of the ports on ER605.

How do I isolate those IoT devices connected to the wireless router from being able to do anything to all other devices on both wireless and wired networks, with ER605? Do I create VLANs? How do I do this? I appreciate any help. Thank you.