@kowalmisiek Right,. This is possible, but is a nightmate to manage 1) you would have to either allow everything through your firewall, or set up one-to-one NAT for every device in your network so...

@kowalmisiek no, they are seperate vlans. Gateways in different subnets are unuseable to devices in a different IP range. It can be done in a pretty complex way, but you need more equipment than you...

So, i have tested and confirmed this on both 7206 v2 and 8411 with the new firmwares, testing the !ip_group function in gateway ACLs Scenario I have an IT vpn, and some remote site vlans that i want...

@TACPAL Sounds an awful lot like the issue i have posted here, with lots of details and analysis https://community.tp-link.com/en/business/forum/topic/761560

@kowalmisiek that is expected - that is what the static route in his router is for Your side can reach out, but on his side, devices are set to use his router as their gateway. So, yor side reaches...

@kowalmisiek remove his network from your port, and your network from his port each port should ONLY have the network that is connecting to it in your situation like this Your router will route...