I'd like to restrict certain wireless clients to WAN access only (i.e. to isolate guests' laptops from our LAN). Is there a way of doing this with the 2820n?

Yes vlan and multiple ssids

Thanks for your reply. If I have it connected to our existing LAN (to provide internet access to our wired LAN users), which already has a DHCP server (on the Windows domain controller), how would "guest" wireless clients get their DHCP addresses? I'd presumably need to disable DHCP on the Draytek so as not to conflict with the existing DHCP server on the LAN?

I too am looking for this feature. While I can create a second SSID that is restricted to WAN only, because I use a separate DHCP service on my Server 2008 R2 box, the clients don't get IP addresses and so the wireless doesn't work.

What I'd like is for the DHCP on the DrayTek to be enabled but restricted to certain SSIDs. Any chance of that feature coming?