Am I the only one not understanding this PVLAN thingy?
PVLAN should be implemented on L2 domain (switches or APs), I don't get the point of enabling this on a L3 device (=router).
Traffic within same VLAN will ARP to learn each others MAC address, a router doesn't handle these ARPs , so the router can't block them.