@Pink_Waters Ok, i dont get it. You are requesting IP groups in gateway ACLs - thats fine, i explained how to more-or-less achieve this as long as you are using the router vlan IPs as gateways for...

@Pink_Waters that isnt really how it works. If the router, and not the switch SVIs are the gateway of the vlan, then the gateway ACLs will still act as the primary rule for the vlans. Switch rules...

@Pink_Waters then you just allow two-way int he switch ACL so the stateful tracking on the gateway takes care and allows the return

@DVA_War I realise you issue is resolved, but i want to back up what clive said. Port forwarding RDP is, genuinely, a SUPER BAD idea. You are opening that machine up to the entire world, without the...

Delete this

@Vagelisk If im reading this right, you want a device to have normal network / internet communocation from your ER605, but also want it to have an IP address on the network upstream of the 605 second...