I have this diagram working as of now, i would like to add some restriction / security to it
the cAP ac is connected by LAN to the hAP ac^2, the hAP handle all dhcp request
I have a bridge in the hAP for all port except the WAN, that bridge got hardware offloading ON because of the NAS
because of the hardware offloading, everything have access to everything (I can't use the firewall).
I would like to make sure the work laptop can't see the camera and the NAS
I would like to block one VM from seeing the camera and the NAS, keeping the other one access to them
the main computer / both VM use the same interface on the hAP
the laptop is connected via wifi, everything else use cable
so what can I use to make this work? could vlan work? if yes, how to handle different vlan on the same interface(main pc and both vm)?