@The_Myers_Home 

Ah, it's the Multi-nets setup on the router.

They actually have a guide for this setup, I think you can check that.

https://www.tp-link.com/en/support/faq/3061/

See if you can figure out what is the problem with your current settings.

@Yannie 

So after a long night of trial and error I have it figured out kinda. I'm learning as I go and loving it. I will try to find time to document everything when all done. I do have a couple more questions to complete this part of my config. 

Questions:

1) It appears that almost all vlan supported switches/routers are configured by default with a vlan 1 which is a untagged vlan and the expectation is that as the administrator you are to isolate your network segments with new or the same vlan Id configs across different devices and not use untagged vlan 1 unless absolutely necessary. It's not written in stone, but it is good security practice to do so. This is also why I found that when I went to configure my CPE210, it should not allow me to set my vlan management Id to 1. Do understand this correctly?

2) On the vlan port page it shows the port number, vlid, and vlans assigned to the port. Is my understanding correct that the vlid I set for the port # is essentially how I want packets tagged? If so what is the flow of this? Are they tagged this id coming in or going out?

3)  On the vlan page it shows the list #, vlan Id #, selected vlans associated with this vlan, and a label/name. I'm trying to wrap my head around how I determine what vlans I associate with a specific vlan and visualize how this flow works. Currently connections to my CPE210 on port4 are getting assigned a .20 ip and can connect to the internet through the wan ports 1,2,&3 but from a device connected to the cpe I can connect to and ping devices on the other vlan. 

Thanks again for all the help, definitely a learning experience that I'm enjoying.