If you don't give them the WPA2 code, then why are you worried about them connecting?

a) thanks n'all that but as this is a box that does wireless so assume LAN >>bind IP to MAC will not help a wireless client

b) I give guests WPA2 codes for "guest " - the root Wireless SSID is for the two in the office who are admins

Is there a full manual in English for this box?

All i can find (altjhough I may be in the wrong place) is snippets of stuff with the rest being behind a dealer password

Manual is in the usual place https://www.draytek.co.uk/support/downloads

If you are referring to the knowledgebase site that doesn't require a dealer password, just that you register and set up a password.

OK - thanks - will read and digest

Hmmm - still struggling - SSID1 is fine - have my 28 digit PSK set which I can test using my mobile wifi:-)

However SSID2 is not working - diferent 10 digit key but I cannot connect to it

Does the MAC address need to be white listed?