What I tried: Linksys RV082 behind a Hotbrick Firewall performing NAT, where the RV082 was supposed to subdivide the network into an IT portion, and allow VPN access to that IT portion. I was unable to configure the RV082 to work behind the Hotbrick (even in the DMZ), although it works fine when connected straight to our DSL line. What I'm trying to set up: 1. Dual Internet Connections, a DSL Line --> DSL Router (bridge mode) b Cable Modem Line --> Cable Modem Router/switch (performing NAT) 2. A load balancing/failover firewall to handle the dual connections 3. Two subnetworks behind the main firewall (physically wired separately, separate switches, etc) A. Administrative/office computers Subnet A should NOT be able to talk to any of the devices in B. Subnet A should have internet access Subnet A can use either the DHCP server from a hardware firewall, or a dedicated DNS/DHCP box (we actually already have one setup for just subnet A, but I'd rather get away from it and use the DHCP server from a hardware firewall). B. IT computers Subnet B should be able to talk to any devices in A. Subnet B should have internet access. Subnet B must use a linux DNS/DHCP box that we have already setup. 4. We must have the ability to VPN into the nework. Ideally, this would consist of some VPN users being able to access subnet A and some subnet B. Access to subnet B is required at a minimum. I have the following equipment: Linksys RV082 (does VPN, but doesn't seem to work with a private IP behind a firewall performing NAT, even when it is in the DMZ). This unit also supports dual WAN. I would like to use this as our VPN server. Hotbrick LB-2. This firewall supports dual WAN. It can stay or go in the configuration. Several Gigabit switches for the subnetwork A few linksys cable modem routers previously used to sub-divide the network in a very hack-ish configuration that we need to get away from. What I would like: A description of a configuration that meets the requirements above, hopefully utilizing just the RV082. I have struggled and struggled with setting up the RV082 behind the Hotbrick (main firewall) in order to sub-divide the IT portion of the network, but VPN just doesn't work in this configuration. If necessary, I can buy another RV082. I am also open to other suggestions, but I definitely don't want to setup a dedicated VPN server-computer, nor am I willing to compromise much on the requirements. Thanks for your help, it's been painful trying to figure this out for the past week.