Hello, Trying to set up an ER605 (so far in stand alone mode) to both Segregate the network into 4 isolated groups that can only see the internet, and also to allow a VPN to access one of those groups