Ok, understood. Bruce sent me some CLI commands to create two new WiFi ssids with WAN access only using different subnets on 2.4 and 5g. Otherwise, I segregated 2 x LAN ports out to be dedicated ports WAN only for xbox and a VOIP telephone. Oh, and SQM but that should be OK. It was the commands that Bruce sent me that I don't know about.