@Hank21 

> For example you have admin VLAN1 and guest VLAN2 in differnet subnets. But you only want admin VLAN 1 can manage your EAP, and want to block manage access from VLAN2. Then this option will be useful. 

Using this picture as an example:

VLAN 1 = LAN = Where the main devices live (EAP620HD)

VLAN 30 = Test = Where client devices connect, basically guest.

instead of putting EAP620HD (192.168.30.100) in VLAN 30, where the client device (192.168.30.101) can access the management page of EAP620HD,

I can put EAP620HD in same VLAN 30 and point the Management VLAN to VLAN ID 1? So it automatically blocks devices inside VLAN 30 from reaching the management page.

Is that correct? Correct my understanding if there are errors within them. Thank you.

  @YuukiA Your efforts to build a network without resorting to a cloud-based controller, like OC200 or Omada SDN, are clear. Adjusting the Management Access setting on the EAP620HD's Management tab will ensure that your ER7206 and EAP620HD are properly linked to the TL-SG1005P switch.

  @PhilipMatrix 

I want to learn as much as possible from the router and learn how it works in standalone mode.

Because there are so many documentations on Omada SDN but not a lot in standalone of their individual routers.

I want to be a good network admin for my job.