Very useful, I didn’t mention this earlier as I also enabled the option to place the IoT network on the 192.168.52.0/24 subnet and turned on AP Isolation, ensuring that devices on the IoT network can’t communicate with one another. Combined with the dedicated VLAN, it gives each device its own almost sandboxed environment, which is ideal for limiting lateral movement and keeping less‑trusted IoT gear properly contained.
Sounds good in theory at least, now it’s just down to the firmware staying consistent with the isolation rules. 
In a completely sane world, madness is the only freedom (J.G.Ballard).
You need to login in order to vote