@moral That is the correct behavior. When you turn on client isolation, it is turned on for the VLAN, which may encompass both WiFi bands and wired connections. Maybe the UI should be updated to auto-check client isolation on the other band when it is checked for one band.