Disabling Guest Access to LAN on R6300v2

CrimpOn

I was hoping to avoid a factory reset, but took your advice and did the reset.  Initial Setup had the Guest Network option "Allow guests to see each other and access my local network" Active (un-grayed)  and disabled (un-checked).  As I configured the router I checked the status of this option.

The option was  Inactivated and enabled when I selected the Advanced setup option to ENABLE AP Mode.  I thought about this and believe it a limitation of the R6300 when used as an Access  Point.  I guess it could look at the protocols/ports the Guests were attempting to access and exclude "LAN" requests, but that would likely be problematic.  The preferred way to do this, I presume, is to place Guests on a separate subnet using DHCP and have the main router restrict that subnet's access to other "LAN" resources.

So, given the R6300 limitations in this area (and by the way I am a bog Fan of this model otherwise) I will either have to create a "LAN MAC access list" on my main router to control access there or Live with Guests having access to my LAN, where critical devices remain password protected.

BTW..  While experimenting with the AP mode on the R6300, I found that you can get better throughput by placing the "upstream router" connection on a LAN port, rather than the internet port as recommended in the documentation.

-Ed