@ZoloNN Requirement rule 2 is the problem - this would requaire a switch rule which isnt stateful - meaning it will block all traffic from IOT back to Main at all times

@Tournas On the early v6 builds, i did find a way to completely resolve it but its a bit of a pain On the global dashboard, copy the site and call it like "zzzTest" Then, move the gateway to the...

@ProSumerTester The only time i have seen something like this is when experimenting and setting multiple different VLANS as untagged uplinks to the gateway on different ports witht he gateway having...

@D-C This method does indeed work - i actually use if for a SG2008 hanging off a dumb POE switch that is native vlan for all the security cameras in that part of the building

@est3ban129 you cannot load older firmware directly once on 1.3.6 Emergency mode or SSH roll-back is the only way I have 2 ER8411 on 1.3.6, other than some VPN related bugs, i am not seeing these...

@D-C You are correct, fallback is IP only, no gateway is set so it cannot route to anything other than the lan IP range