@GeorgeBark no, my solution is to run the guest WiFi connected to the guest vlan from my routers WiFi only and for my work laptop that's too far away for the guest WiFi so I have used ethernet over power.

Down side is my home WiFi has great coverage, but the guest is as bad as it was before... Where if they just sorted the vlan out so its over the Decos and output to the router I could have great for both.

+1 for VLAN tagging in AP mode in both Guest and iOT networks

  @NicolasX 

I'm looking at Firewalla's new access point - it supports zero trust and VLAN tagging.  Firewalla dot com has more info.

based on the lack of response, and the recent stories in the media on TP Link's state sponsorship- I'm pulling my TP Link gear in the next few weeks. 
 

/sigh

  @tt75 just set up my Decos, couldn't vlan tag.  search brought me here.  seriously?  tp-Link, really?

Decos are going back in the box and back to the vendor tomorrow.  I came back to tp-Link because my router has been outstanding.  Bummer I have to start dating again and fall in love with a new brand.

Given up on the Deco's they will be on eBay shortly as fine for a "retail" household and would probably be an upgrade to an ISP router setup.

Got an eap610 and currently have it setup with my old eap225 - vlans and separate (and thus secure) guest SSID and coverage all good. Also playing with getting the Omada controller software on my old raspi or maybe buying the oc200 as a central setup point and it then brings things like fast roaming etc to the party.

  @tt75 I also gave up the wait - these will be on ebay soon. Now I am happy with my Synology setup. For us requesting VLAN tagging in AP mode, we are not layman, TP-link had gave up this customer segment already. You can see from their attitude to issues we raised, full of prejudices.

Your right sadly they seem to see the Deco's as the simple setup "consumer grade" items. The eaps and Omada seems to be more business orientated but the ones with the higher level functions like vlans.

Just odd how their website mention the security of vlans but then the don't implement them on the Deco's and arguable leave the very consumers that would not know better open security wise.

Can we add this thread which is allegedly under future consideration: https://community.tp-link.com/en/home/forum/topic/587006