Hi there,
I have a set up of hEX ( main router) + Switch + 5 cAP ac at home. NAS, Printer also connected to switch.

CAPsMAN is running on hEX and five cAP ac as CAP with local forwarding mode. Home WiFi and Guest WiFi ( virtural AP) also set up running smoothly.


My question: since Virtural APs(gurest wifi) is running on 'local forwarding' mode, so they got the IP address from the same pool as home wifi, so guest wifi can access the device on the LAN.

I in fact found a way to do it , but I am not happy with it. My way is to run home WiFi in 'local forwarding' and Virtual AP in 'CAPsMAN forwarding", then create a new dhcp/ip address/ip pool for the guest wifi, so the guest wifi have different ip address and I can set rules in firewall to isolate the guest wifi from access to devices.

I would like to run both homewifi and guest wifi in 'local forwarding' modeIs and in the meantime isolate the Virtual AP from the LAN device ?

Thank you!