I am new to VLAN configurations, and have read a number of useful articles, manuals, and threads like this one http://www.linksysinfo.org/index.ph...vlan-for-airport-extreme-guest-network.69665/ but am running in to a roadblock. It could be my configuration, hardware, or firmware version so I'm asking for a bit of insight here. The equipment: I have an Asus RT-N66U flashed with Shibby's Tomato version 1.28.0000 MIPSR2-117 K26AC USB AIO-64K. I do not use the wireless functionality on this device due to it's location. The network has a Netgear GS724T switch that supports VLAN tagging. An Engenius ECB3500 WAP is in use that allows for multiple SSIDs and VLAN tagging of that traffic. Due to existing wiring limitations, all traffic from the Netgear switch (including traffic from the ECB3500) travels on one Cat6 wire to the RT-N66U. Originally, I did not use VLAN tagging and no traffic is currently tagged. What I am trying to achieve: I would like to add a guest SSID on the ECB3500 and tag that traffic with a VLAN ID so that it stays segregated and on it's own IP range separate from the current office traffic. What I have tried so far, unsuccessfully: I have set up the new SSID and tagged all traffic from that connection as VLAN ID 10. I have set up a new bridge on the RT-N66U for this new traffic to travel over, as well as configuring the VLAN page to recognize and route this traffic as necessary. I used the telnet commands to allow all LAN ports on the RT-N66U to recognize the VLAN tagged traffic as well as untagged traffic. Unfortunately, when it is configured as seen below it only recognizes VLAN ID 10 traffic on all LAN ports. If one of those ports is unchecked (via telnet), then it operates as normal but ignores VLAN ID 10 traffic on that port. I don't want to have to force all existing (default) traffic to get tagged by the switch in order for the RT-N66U to recognize both data streams. It is also impractical for me to wire the WAP directly to one of the ports on the RT-N66U due to existing wiring conditions. This is the bridge I created: This is what the routing table looks like: This is what the VLAN page looks like: I have not made any changes beyond what is seen above, and running the command Code: nvram set vlan10ports="1t 2t 3t 4t 8" nvram commit reboot Maybe I missed a step? Maybe I'm trying to do something impossible? Any insight would be greatly appreciated. I'm definitely out of my depth here!