Okay, networking newb here, so please be gentle. I have a simple network with a few workstations, printers, and VoIP phones. I'm using the latest Toastman build on a RT-N66U, mainly for the QoS for the phones. We have a credit card processing machine that connects via the internet, and because of PCI compliance, I need to segment that sucker, keep it away from everything else on the network, and make sure nothing can get to it. I figured the best way to do this would be to setup two VLANs: one for the workstations, printer, and phones, and one just for the credit card processing machine. Both VLANs need to connect to the internet (WAN). It seems like a simple setup, but I can't seem to figure out how to do it, and Google hasn't helped me much on this one. I get as far as setting up the two VLANs, assigning the two different LANs to them with DHCP, and everything is happy, but nothing can actually reach the internet (WAN). So what do I do? Then, what do I do to make sure nothing can attack the VLAN with the credit card processing machine, and that none of the ports are open? Thanks!