sorry this known stuff -however I see different ways to configure without understanding what is best. Actually I have Tomato based router (Cisco3200 -shibby) behind a cable modem. I need to connect to DSL-line to an Fritz-box Router (including dsl modem). Provider is not allowing to "dsl modem -ony mode". I understood from older post (toastman) to configure the tomato router behind the "primary" as ACCESSPOINT without DHCP. What I want is to USE some "known tomato functionlity" such as ACCESS RESTRICTION, VPN tunneling, dnsmasq blocked traffic - and also to connect WLAN and LAN clients. If possible also the VLAN (br1) -meaning Multible SSID. here the question... 1) under Network WAN/Internet a) disable --> "see http://tomatousb.org/forum/t-457887" b) static if I choose "static" - I can not define a "gateway" -(for primary router) if I choose "disable" - with bride WAN to LAN. --> will this give me ONE MORE free port to connect "clients", as I use the WAN(Internet) port to be connected to primary router 2) what to fill/configure in the LAN section (beside disable DHCP) to allow VLAN on the seconary router. (for guest LAN) -should not have access to the other network addresses.