@Si-man It looks as if Sonicwall TZ270 is VLAN-aware so it is just a matter of proper configuration to make it work. Basically you need to define on Sonicwall TZ270 the same VLANs (DHCP enabled) as...

@JoeAshley You need to set up the link between TL-SG116E and TL-SG2008P the same way as the link between TL-SG116E and pfSense, i.e. tag Port 7 on TL-SG116E and Port 1 on TL-SG2008P in all VLANs.

@gjunk I actually have never done it, but try something like this. Comcast Router: WAN set by Comcast to your public static IP address LAN set to 192.168.2.1. TP-Link Router: WAN set to 192.168.2.2...

@Didier31 This is a pretty late reply, but I couldn’t answer earlier. I’m not sure if my network configuration will be of any help to you, because ER7206 is not at the centre of my network. I have a...

@Robinyo You can't do it from the WAN side of the router. The router's NATting can't be disabled.

@Didier31 It’s nice to see that you have found a solution that works for you. I looks like OpenVPN is a quite flexible product and can be successfully configured in various ways. I configure my...