L2 Isolation matrix (grouping)

Yup. i can do that. Each room cannot see each other but they can see the server (port non isolated on same vlan, tested and happily working).

I wish to go one step further: example, i need that ports 12-13 belongs to room 101, ports 14-15 to room 102. I need room 101 to be isolated from room 102.

This becouse chromecast's guest mode doesn't work with ios13. i need the guest to access to tv's access point (i know tricky, but this is the only safe way) and see on the same network the chromecast.

But.. each room has not to see other room's cast.

That matrix allows me to do it very quickly (and set custom rules). Why is better to do this way than with firewall? just becouse sometimes hotels switch televisions between rooms, and it cannot be device-related. And, it is better not to install a gateway behind a gateway behind a .... (infinite)

This all belongs to the "netflix-gate" realm, the google's device nowdays is the most flexible item to use. A huge problem

I don't know how many people does have this problem NOW, but this is an undergoing iussue.

The multimedia idea that is lying on those years is the byod model, that is taking over even into hospitality. What people demands is 60% netflix, 30% youtube, 20% the rest. AirPlay does not support Netflix. Philips has huge security problems with its integrate chromecast app, however there's a pretty wide scenario that will grow in the next future.

I see also devices as GoPros, all the media that a tourist might want to see when back home.

Another way could be let the switch have the dhcp server with multiple pools, to split the computing power around the devices..

Hospitality will be a pretty challenging field.

Thanks for replying!