@AngelaGarza , Using Omada, everything is allowed by default so it looks to me like rule 1, 3 and 4 are useless. The only thing that's blocked are packets flowing from IOT to 3 VLANs. You wouldn't...

@Bmark , It's been a while since I've been using an ER605 in standalone mode and I'm not going to drop it from my Omada setup to test but: It looks like all the IPs involved are in the same subnet....

@StephaneDupont , The gateway ACL would be DENY IOT -> DEFAULT. All communication initiated from IOT towards DEFAULT is dropped at the gateway (pure inter-VLAN control). All communication initiated...

@StephaneDupont , That single rule prevents traffic from VLAN1 to VLAN2. It blocks traffic initiated from VLAN1 to any "server" in VLAN2 (the more intuitive behavior). But it also blocks traffic...

@Roro747 , I actually had checked that aspect already. TL-R605, max DHCP reservations? - Business Community (tp-link.com) That's a reply from staff... the limit was 1024 on the v1. I'd be surprised...

@Roro747 , Hmm, all your clients ended up in the 10.xxx range? None of them got 11.xxx addresses? And new ones now get 169.254.xxx addresses? Did you make any reservations that could get in the way?...