@Djw1973 Omada Controller (Assuming you are using it) > Site > Settings > Services

Its Called DNS Proxy

Here is difference between v1 and v2 Ref : https://community.tp-link.com/en/business/forum/topic/527102

Here is my setup Router (ER605 v2.0) -> TL-SG3210 v3.0 > EAP 650 Vlan(s) = 5 (Local,Home,IoT,Guest,servers) Here is scenraio ( there is no explict ACL blocking the connections ) I connect via Home...