Hi, everyone. I'm new to this board, but I've been using Linksys routers (WRT54Gx and E3000s) for several years. I used DD-WRT for a long time, and recently switched to TomatoUSB. I'm wanting to set up a network with two SSIDs (private and guest), using three WRT54GLs, one as the gateway router, and the other two simply as APs. This is to provide coverage throughout a large building (church). Currently, all three routers have "tomato-K26-1.28.RT-MIPSR1-107-MiniIPv6.trx from tomato.groove.pl. The gateway router has been set up with the private SSID and a guest vSSID. WL0.1 is attached to br1, which is assigned to VLAN10. I have separation between the two networks and Internet access from the guest wireless. That part all works OK. Oh, and I assigned LAN ports 1 and 4 to br0 (VLAN1) and LAN ports 2 and 3 to br1 (VLAN10), with tagging turned on on ports 2 and 3 in both VLANs. The two "outlying" WRT54s that will be APs are plugged in to ports 2 and 3. From nvram: lan1_ifnames=vlan10 wl0.1 lan_ifnames=vlan0 eth1 trunk_vlan_so=1 vlan0hwname=et0 vlan0ports=3 2t 1t 0 5* vlan0tag=16 vlan0vid= vlan10hwname=et0 vlan10ports=1t 2t 5 vlan10tag=32 vlan10vid=2 vlan1hwname=et0 vlan1ports=4 5 vlan1vid= wan_iface=vlan17 wan_ifname=vlan17 wan_ifnameX=vlan1 wan_ifnames=vlan17 wl0_vlan_prio_mode=off wl_vlan_prio_mode=off Next, I have a single CAT-5 connecting the AP routers to the gateway on LAN2 and LAN3. I want these to provide the "admin" SSID and the "guest" vSSID access to the Internet, but not to each other, allow "admin" wireless users access to admin network resources, and not allow the guest users access to resources on the admin network. I've done this before, albeit with a Cisco Catalyst and APs capable of assign VLAN numbers to SSIDs and vSSIDs. And the Catalyst was connected to a separate router. Anyway, am I looking for a capability in these routers that isn't there?