Hi all, New here. Asus RT-N66U with Tomato Firmware 1.28.0000 MIPSR2-108 K26 USB AIO-64K after lots of experimenting with ASUS's FW as well as Merlins FW. I'm really enjoying Tomato and finally feeling like I have a solid product in the RT-N66U. This may have very well been covered in other threads, but I am not entirely sure what I'm looking for so I'm not sure what search the forum topics for. No disrespect meant towards the forum. Here's my problem: With ASUS's factory firmware in all versions that I had tried, there was an option to have a Guest SSID and isolate it from other devices on other SSID's, etc. but still exist in the same network of 192.168.0.1/24. I didn't care if the Guest SSID was on a subnet or not before as I wanted to isolate the questionable devices from the known devices and I didn't see a need for anything special. In fact, I preferred guests on a subnet, but now it's limiting what I want to do with Tomato. What I think I want is to have 1 class C network and no subnets. I want to have my known devices be able to see each other. I then want to be able to have a known guest device on a guest SSID that's connected to br0 as well but can't see the other devices. I think I want this simply because it seems there are more options available to br0 than there are to the others. It seems that logging, charts, etc. are simpler that way as well. I suspect that this might involve iptables. I have a very basic understanding of iptables. I'm generally a quick study and tend to master new ideas once I see something in action though. So, can a specific guest SSID that is associated with br0 be isolated from other SSID's and wired devices? Is it something I can accomplish with specific MAC or IP entries somewhere? I am assigning specific IP's to these 6-7 guest devices already and I have no problem adding an entry with each new device that might be added. I prefer to use MAC addresses if possible. Any tips, ideas or other suggestions would be appreciated! Thanks!