Thanks!

“Untagged” here means default VLAN with id:1 - the one used when nothing is set. By default all ports on the switch are set as untagged for this id.
Maybe i should have marked VLAN1 and VLAN2 as VLAN10 and VLAN20 (with respective id’s) to avoid confusion.

Yes currently its set to dumb switch but i can change/tag them according to my needs. Ive already created VLAN1 on edgerouters side for other devices (unifi AP, pc). So this part should not be more difficult in case of VLAN2. Except trunking. So what im asking here would connecting tagged ports (vlan2) on edgerouter and tagged ports on the switch with second cable work? Or should i still try to push both tagged and untagged traffic to switch through one cable

Even if your login page is not easy to break, it will be indexed by robots or hackes in their list. And they will test on it every vulnerability that will be published for any DSM component. Using VPNs like ZeroTier or Tailscale is definetly MUCH more secure than all of those tweaks and easier to setup too.

But offcourse its YOUR data so … good luck :)

Can it monitor containers or some files?

Thanks for all your advices guys. Problem has been solved here thanks to user u/mccantech https://www.reddit.com/r/Ubiquiti/comments/17y987i/i\_want\_to\_separate\_my\_sons\_pc\_and\_wifi\_devices/

Why do i need managed switch for in this setup? I mean ERX can create and manage VLANS, unifi can add tags to its wifi networks so why additional device is needed here?

I want to separate my sons PC and wifi devices from default network.

Even though im familiar with neworking - subnetting with masks, DNS, DHCP, VPNs (wireguard, openvpn, zerotier) somehow VLANS and tagging has never clicked in my head.

I have classic problem and pretty classic setup - edgerouterX and unifi AP as wifi device. All devices are in the same LAN. What i want is:

• my son’s PC (cable) is separated from default network
• some particular wifi devices are also in this network (separate SSID)
• this network does not have access to default network …
• … except some few things like in this example (wifi) printer - everybody should have access to it

Ive watched 3 videos about Vlans and have seen this tutorial. https://help.ui.com/hc/en-us/articles/115012700967-EdgeRouter-VLAN-Aware-Switch but it doesn’t have double WIFI ssids.

So i still have questions.

1. Should i remove my current LAN or should i just tag it with id: 1 (this is tag for default networks right?). I dont want to creat entirely new network as i have things assigned to my IPs (like subdomains but not only that)
2. Should i tag eth1,eth2 and eth4 ports with tag id ‘1’ or should i just set ‘untag 1’ for eth3?
3. eth4 should be “trunking” port right. Should i just set both tags on it - would it be enough?

Ive seen people building whole houses from empty bottles. He could do the same with those phones. He would end up with true “smarthome”

What if they dont ring but start to lockpick/bash your door right away? :D