I need some advice on setup differences between Balance with AP1 mini and Surf SOHO. The goal in both setups is to have WiFi isolated on its own VLAN to prevent WiFi access to the main computer. On the SOHO I set the WiFi to VLAN 3, with no inter-VLAN routing. The main computer is connected to the untagged LAN on port 1, which is also set to no inter-VLAN routing. WiFi Clients can use the internet (wired WAN) no problem even with the main computer disconnected.
On the balance, I can only log into the AP1 if I allow inter-VLAN routing on both the untagged LAN and on the wired AP1 VLAN ethernet port. That arrangement allows the AP1 clients to access the main computer. Is it correct to use the inter-VLAN routing for AP setup only, then simply uncheck the boxes and let the WiFi take care of itself? What setup do I need on the Balance to allow WiFi access to the WAN internet connection?