@MrAlab Yeah the NAT forwarding is a bit iffy at times (multiple posts on this). I'm thinking a more reliable option would be to put OC200 in it's own separate VLAN with no other devices. Then use...

@MR.S Thank you so much this is exactly what I was looking for. I did it a bit differently tho - implemented a new rule in Transmission -> NAT with: Source IP: Any Interface: WAN Source Port: 1-65535...

My network setup (simplified) is as follows: ER605 -> Switches -> OC200 & EAPs All the devices are adopted by the OC200. I've enabled Management VLAN for Switches and APs. This VLAN id isn't 1. OC200...