@ken22 If your network has only one network segments, it's easy to set up VPN. You can refer to the FAQ. TL-R600VPN supports three types of VLAN....

@jedr If your modem can be a router, it means that the switch will get the private IP address even if get the IP from the modem, then you don't need to worry about that other people can access your...

@ken22 Could you show me your configuration? I used this function before and it worked. Maybe has some problem for configuration.

I got your meaning. You client and broadband is from the same cable connected to the switch. I think it cannot meet your demand. Still need to isolate the clients and broadband.

You can confirm if TL-SG1005D can work with the normal data. The unmanaged switch should not be able to block VoIP. If you devices both support 1000M, please try to change the cable or confirm that...

You can refer to the UG for this function. Only V2 supports web authentication. https://static.tp-link.com/2018/201810/20181031/1910012491_TL-ER6120ER5120ER6020_UG.pdf