Revisiting this thread: https://community.tp-link.com/us/home/forum/topic/593970 and this one: https://community.tp-link.com/us/home/forum/topic/593970

This seems to have been requested a lot. I need to disable NAT on Deco as I have to use an upstream router/FW which has much more advanced security features than is available on Deco. Still happy to use it's internal DHCP etc. I don't want to use AP only mode as I want the parental control features (as limited as they are).