@Cuda 

hi there, tag means when internet data outflow the router/switch, the data still obtain the VLAN tag in the data. Untag means when data outflow a router/ switch, the tag will be deleted and there has no tag on data. The PC can only deal with the data without a tag.

The function "control VLAN communication" of this model cannot work. The VLAN function of this router can only work as the network isolation.

But the "control VLAN communication" seems can work on the model ER605 and ER7206, here is the instruction for it:  https://www.tp-link.com/en/support/faq/3061/

You can set up the VLAN and the ACL to manage the communication. By default, if there has no ACL, all the VLANs on the router's LAN port can talk to each other .

And this needs to wait for the latest firmware version coming up in few days.

@John1234 Thanks, now before continuing with the topic, can you tell me something about the lan groups, specifically:

IPGROUP_ANY

IPGROUP_LAN

And one that is named: Me

I think that the ! before the name means "not" like not IPGROUP_ANY and so for, but I'm having doubts about my firewall rules and bandwith controls.

For example, if I want to block all outbound traffic and only allow certain groups, how should I word the rule?

This are some of the rules I have so far:

Sorry about the table, I tried to fix it but seems broken when pasting.