@Pink_Waters that isnt really how it works. If the router, and not the switch SVIs are the gateway of the vlan, then the gateway ACLs will still act as the primary rule for the vlans. Switch rules...

@Pink_Waters then you just allow two-way int he switch ACL so the stateful tracking on the gateway takes care and allows the return

@DVA_War I realise you issue is resolved, but i want to back up what clive said. Port forwarding RDP is, genuinely, a SUPER BAD idea. You are opening that machine up to the entire world, without the...

Delete this

@Vagelisk If im reading this right, you want a device to have normal network / internet communocation from your ER605, but also want it to have an IP address on the network upstream of the 605 second...

@Pink_Waters Way back in the old days (pre the last few months) when the TP-Link staff were actually allowed to discuss things, im sure i read that gateway ACL IP groups were coming in controller...