I have the new Almond+ and I have it set up as follows:
-bayside: 2.4 GHz primary network.
-bayside-5g: 5 GHz primary network.
-bayside-guest: 2.4 GHz guest network.
-5 GHz guest network disabled.
-"Enable Wireless Client Isolation" not checked on either the 2.4 GHz or 5 GHz bands.
-Both the touchscreen and web browser interfaces say no updated firmware is available, and I am running version AP2-R064-L009-W015-ZW015-ZB005.
Here's where I want to get:
Wired clients: Can communicate with wired clients, clients connected to the "bayside" and "bayside-5g" SSID's, and the internet. Cannot communicate with clients connected to "bayside-guest" SSID.
bayside: Can communicate with wired clients, clients connected to the "bayside" and "bayside-5g" SSID's, and the internet. Cannot communicate with clients connected to "bayside-guest" SSID.
bayside-5g: Can communicate with wired clients, clients connected to the "bayside" and "bayside-5g" SSID's, and the internet. Cannot communicate with clients connected to "bayside-guest" SSID.
bayside-guest: Can communicate with clients connected to "bayside-guest" SSID and the internet. Cannot communicate with wired clients or clients connected to the "bayside" and "bayside-5g" SSID's.
With my current configuration clients connected to the "bayside-guest" SSID cannot communicate with a client connected to the first ethernet port (as they shouldn't), but the issue I'm having is they can communicate with clients connected to both the "bayside" and "bayside-5g" SSID's. If I try to fix this by checking "Enable Wireless client Isolation" on the 2.4 GHz band, then clients connected to both the "bayside" and "bayside-guest" SSID's are restricted to internet access only, which is not what I want either.
My other router is a 5-year-old Netgear WNDR3700 v.1, and I believe it handles this perfectly. It has four "Enable Wireless Client Isolation" checkboxes, one for the primary and one for the guest SSID on the 2.4 GHz band, and one for the primary and one for the guest SSID on the 5 GHz band. Checking this box restricts clients that are connected to that particular SSID to internet access only. They cannot communicate with clients connected to other SSID's or wired clients, nor can they communicate with other clients on the same SSID. The Almond+ only has one of these checkboxes for each band, so you cannot set the behavior of the primary and guest SSID's on the same band independently of each other as you can on the Linksys.
Additionally, the Linksys has a checkbox in the configuration of each band's guest SSID labeled "Allow guests to access My Local Network", that when left unchecked along with leaving "Enable Wireless client Isolation" unchecked restricts clients connected to that guest SSID to only communicate with other clients connected to the same guest SSID and the internet. This is exactly what I want.
So I think you see where I'm trying to get. Let me know if I can supply any further clarification, or if the Almond+ already has this feature and I'm simply missing it. Thanks for your time.