What I have done is to deny my guest WIFI traffic to other VLANsUnder Wireless, Firewall & traffic shapingchange to the guest SSIDadd a layer 3 firewall rulePolicy: denyProtocol: anyDestination: local LANPort: anyComment: description of rule

In the dashboard go to the site that you want to look at.go to network-wideIn the clients section, click on the +Add port and mac addressThe clients section will now show you the port and mac of the clients.

If you had a VPN tunnel to another site and you wanted that subnet to be visible to the other site. Lets say you have a main datacenter and there are resources there that you need to use from that subnet, you would setup a VPN tunnel between your MX ...