Hi Everyone - Looking for some layout advice here.

Hardware Specs - 

Spectrum cable modem 500/25. Is not a router as well. 

ER707 VPN Gateway with 2 ISP lines in ports 2&3 with fail-over activated.

Archer AX11000 Wireless router

TP-T1600G switch

-------------------------------------------

Current layout is   Modem -> ER707 -> AX11000 -> T1600.

Something about this doesn't seem right to me. I have the 2 ISP lines going into the ER707 for the fail-over features, and then a line from the ER707 going to the router for IP address distribution and filtering. This then leads to the switch where i have various lines connected. I was concerned about connecting the switch directly to the ER707, as it would bypass the router and the filtering capabilities. 

It all seems to be working fine, but I feel there is a more efficient way to do it, where i would retain all the same capabilities and not open myself to potential risks. 

I've also noticed that if i use the Omada software controller, the ER707 is listed but shows as disconnected. The T1600 shows as connected. If i patch cable directly to the 707, all of the features are available. 

Any thoughts on a better layout or something I'm missing is appreciated.