I'll try to keep this short and to the point.
At one location I have an RV320 router, a WAP321 and a SG300-28P switch with guest wireless setup (VLAN25 - 10.0.0.x). I set the access rules on the RV320 so that guest wireless users (10.0.0.x) cannot ping or see any of the internal network resources (VLAN1 - 192.168.2.x) and it works perfectly; internet access only for guests.
I'm now setting up an RV340 router with a WAP571 and a SG300-52MP switch using the same scenario and same settings but with this setup I can't seem to hide the router from the guest wireless users (VLAN25 - 10.10.100.x). I'm using the same access rules but the guest wireless users can ping and log into the router using 192.168.100.1 or 10.10.100.1. I'm obviously overlooking something but I can't see what so hopefully someone can tell me. I tried adding specific access rules to block http and https access to 192.168.100.1 and 10.10.100.1 from all 10.10.100.x clients but that didn't help either. It seems like my access rules are being completely ignored as they can all still ping and access those two IP addresses to log into the router. I've reset all three devices back to factory defaults several times and started over but to no avail. I can't seem to prevent access to the router from guest wireless users no matter what I try. I've attached a screen shot showing both routers access rules. I have a strong password and not using the default username to log into the router but I'd rather not have the login IP accessible at all to guest wireless users like the RV320. Thanks in advance to anyone who can help me solve this problem.