Hello all. First post here. I have been going through multiple posts and tried a bunch of things and I am still having issues getting my setup as I like it. So hopefully I can get some help from the group. Router - Netgear R6400 Firmware - Tomato 1.28.0000 -3.5-140 K26ARM USB AIO-128K I am currently running 4 VLAN's, each with their own IP Range and SSID. This seems to be working well. Here is what I am trying to accomplish... VLAN1 - Native VLAN Traffic - 10.0.1.0/24 - Traffic through ISP - WORKING VLAN5 - Kids VLAN Traffic - 10.20.1.0/24 - Traffic through ISP (Using time schedule on Subnet for Internet restriction after specific time) - WORKING VLAN10 - PIA VLAN Traffic - 172.16.1.0/24 - Traffic through PIA VPN - NOT Working VLAN15 - Work VLAN Traffic - 192.168.20.0/24 - Traffic through VPN Tunnel to Watchguard at Work - Not Working The issue that I am having is that when I run my PIA VPN Client, one of two things is happening: 1.) The VPN seems to drop the connection to PIA and then the traffic automatically starts routing out of my normal ISP. I would prefer that if this happens, that the subnet gets no internet access as opposed to the traffic going out through the ISP. 2.) I have tried some other settings and gotten the connection to stay up, but then all of my other VLANs start funneling their internet traffic through PIA which I don't want. The PIA only seems to get ~10Mbps which is fine for that VLAN, but I would prefer to get my full 200Mbps on my other non-PIA VLANs. Has anyone successfully set up a VLAN for PIA that stays up indefinitely and only funnels that VLAN/Subnet traffic through PIA? I assume that I am missing some Custom Configuration lines that might be the key. In regards to the VLAN15 to Work, I have tried messing around with the OpenVPN config file and trying to match the settings in that file to the various areas in the VPN Client Config page with no luck. Has anyone successfully connected Tomato to a Watchguard? Any advise is appreciated on the above.