In one of our hotels, I have a balance 580 with the latest firmware 5.4.7 build 2423. Both the corporate and guest networks are connected to the Peplink 580.
All corporate trafic goes with Speedfusion to our head office.
All guest trafic should go straight out on the Internet.
Of course I don’t want that guests can access any of the corporate networks. Therefore in outbound policies, Expert Mode is enabled and the rules are placed above the SpeedFusion routes. But despite the expert mode, I can access from the guestnet the corporate networks of other hotels that are connected with Speedfusion/Site-to-Site VPN to the head office.
I have done the same in other hotels and it has always worked fine but those Balance’s are on firmware 5.3.12 build 1859. Is there a bug in 5.4.7 or do I have to configure something differently in 5.4.7?