Thinking through it though - as long as I wind up full access across both subnets - I actually prefer the 192.168.1.1/24 and 192.168.2.1/24 addressing.So - at this point I think we are almost there - last bit of help I think I need is the routing and firewall rules to provide proper vlan access control. (That is 200 = Private with full access to the Internet and other users & devices on the LAN an