IMHO it depends on what kind of services your ISP provides. If you have a dynamic IP via some PPPoE or similar, keeping your Archer and placing a secondary device (like an ER3 or ER-X) in your DMZ may be the simplest approach. That device can then provide 44NET via a VLAN. As a secondary approach, a Mikrotik router could do the job, but it's a little mode complicated to set up, and depending on your network bandwith, you may need a higher class model. If you have a static IP, the the EdgeRouter as your main router gives you the smoothest path (this is because the IPIP endpoint setup on the ER, to my knowledge, needs a static IP which the dynamic WAN setup can not provide. Maybe some local D-NAT could correct that, like on the Mikrotik, but I never explored that path). Again, you need to evaluate the feasibility of using such a device in regard to your internet bandwidth. You have also another option: place a RB Pi class system in your DMZ (or forward only IPIP, but I don't think the Archer is capable of such thing), and provide the 44NET subnet on a VLAN. Marius, YO2LOJ On 19/06/2022 00:59, Daniel Audet VA2DG via 44net wrote: