Hi guys, Hoping someone can help - i'm in IT but far removed from my networking days. I currently have a standard home setup with a wireless modem/router (Asus RT-AC52U) which does my wireless and wired connectivity for my home. The internet connection is a point-to-point line of sight Wimax-esque connection. I believe it uses double NAT. This will be changing in the coming months to a FTTH connection. I have a Cisco 3560-CX IP-base that I would like to use for a number of reasons including: integrated PoE general lab environment for my learning VLAN demarcation using ACL's (not configured yet) I'm trying to set this up to work with my home modem/router but am falling short. Here's what i've done so far: Enabled IP routing on the 3560-CX Created multiple vlans with their own /24 subnets (10.10.10.x/10.10.20.x etc.) Created SVI's for the vlans Created DHCP pools where necessary for the vlans and confirmed working Set gateway of last resort on the 3560-CX to the Asus modem/router (192.168.1.1) Configured port 14 as a routed uplink port to the Asus modem/router (no switchport, set ip address 192.168.1.239 on the asus subnet 192.168.1.x/24) Static routes have been set up on the Asus modem/router PC's connected to the different vlans can see each other (ping), and can obviously ping the respective vlan gateways, but any attempt to ping onto the 192.168.1.x/24 modem/router subnet times out. Traceroutes stop at the gateway of the respective subnet that the PC resides on. If pinging from the 3560-CX itself in the CLI I can ping both the port 14 IP address and the asus modem/router. It's probably something stupid but i'm trying to ascertain the following: Why can't I ping / connect to the 192.168.1.x subnet from any of my created vlans? Do I need to do additional configuration on the Asus modem/router? Does it need to be in bridged mode? Looking for generally connectivity first but all vlans will need internet connectivity - haven't looked at NAT yet. Obligatory network diagram: Thanks in advance!