Edit #1: Never mind. Got it
Edit #2: For the benefit of others. I didn't know, and didn't find it documented, that the router is smart enough to automatically route traffic between different VLAN's (subnets). That said you still need firewall rules to allow/block traffic. In my case all traffic between different VLAN's is blocked
except for the AP.
I've configured my Z2+ with a number of VLAN's (LAN, WLAN and DMZ) all with completely different subnets. All is working fine.
However I have one issue and am wondering if there's a solution.
My wireless AP connects to the Z2+ via a port that is designated as WLAN. That means it is in subnet2. However I'd like to be able to access the AP, for configuration/monitoring purposes, from my machines on my LAN (subnet1). Is there a way to do this?