@florian_22 , Hmm, I had not experimented enough with the "Guest Network" functionality apparently. I just remedied that situation. It indeed blocks way more than just traffic within the wireless...

@florian_22 , If all your IoT clients are wireless, you only need to setup the IoT wireless network as a Guest network. If some of them are wired, then you need to resort to switch ACLs (rules 5 & 6...

Hi @Clive_A , I'll note that the product comparison feature (which I'm familiar with) does not seem to allow a v1 versus v2 comparison. It may not matter anyway because the specs for the v2 don't...

Hi @Tescophil , It appears I've ended up with something close if not identical to your configuration. I had created the management VLAN already, in prep for another attempt. I guess I'll get rid of...

Hi @Fae , It looks like the feature gap between v1 and v2 has grown since this article was published (e.g. Wireguard). Is there a full comparison somewhere else or can this post be updated?

Hi @Hank21, So maybe put another way, the Controller UX to enable logging of ACL rules only exists for MSPs (to help their customers). I assume/hope the devices doing the actual logging are not aware...