Separate WAN port for Guest network
Since all networks on the WAN side of the main note are accessible from the Guest network, I suggest that one of the LAN ports of the main node can be configured to be the WAN port of the Guest network only. This should apply to the bridge mode as well as to the normal router mode. For the bridge mode this is particularly desirable, since many routers one might use with the Amplifi devices allow to configure a separate guest network with a dedicated LAN port for the guest network. To this end it would be even better if also Amplifi´s guest work could be operated in a bridge mode, so that an additional nat is avoided.