Bests & Worsts Reviews from Amazon

This review is for: TL-SG108E 2.0 Firmware Version: 1.0.2 Build 20160526 Rel.34615 I bought this switch specifically for it's VLAN functionality and while I don't often write reviews for many products, I feel obligated to warn other more "network savvy" customers to stay away from this item. I must echo the review by "A Customer" on July 13, 2016: "Regardless of PVID or 802.1Q VLANs, every port on this switch passes untagged traffic on VLAN 1. Even if you set another VLAN to be untagged on a given port, you cannot then remove VLAN 1 from that port." This is a huge issue because if you wish to segment sections of VLANs using a "router on a stick" implementation, you can set the PVID on a port to be a VLAN other than VLAN1, but then broadcasts received on another port in VLAN1 are allowed to propagate out of all ports. Another Amazon reviewer, putzomaticon, sheds some light on this issue when he wrote TP-Link support on May 28, 2015: "I contacted TP-Link support regarding this issue and they basically told me they implemented these features this way on purpose because this model switch is apparently targeted at end users that want these features, but don't know anything about them. Here is a quote from their response: "For your first advice about no management vlan of TL-SG1016DE,it is not the oversight, it is due to consideration of small business environment, where most users do not have enough network knowledge,they know little about the concept of "management vlan" and they do not have so much concern about the security problem caused."" Network admins in a small business environments suddenly don't care about network security? This is a huge security concern because you're unable to adjust the management VLAN and the management IP address is accessible for every VLAN on the switch through VLAN1 regardless of the configuration. Truly a horrible and insecure implementation.