Good day all,

First some background information about my network. I use one ER7206 router, one SG2008P switch, 2 EAP245 APs, one EAP110 AP and one OC200 controller. All devices are being controlled by the OC200.

There are two gateways: 10.0.0.1, which is actually the ER7206. The second one is 10.0.0.254. This is actually a VPN connection via a separate server to remain a bit more anonymous. 

The same applies for the DNS servers: 10.0.0.1 is my main provider's DNS, 10.0.0.254 is a server acting as a pihole DNS.

I have configured two networks:

- LAN1 10.0.0.1/8, VLAN 1. This one uses default gateway 10.0.0.254 and DNS server 10.0.0.254. 

- LAN2 192.168.1.1/8, VLAN 2. This one uses and automatic default gateway, this internally resolves to 10.0.0.1. The DNS server is 10.0.0.1

There are two wireless networks:

- wifi: this is the default wifi and thus using the VPN and pihole DNS

- wifi2: this one uses VLAN2 and therefore bypassing VPN and pihole DNS

Goal is to route "ordinairy" traffic from clients like a phone or laptop via the VPN and the pihole DNS. Actually this works pretty good. The traffic which should not use the VPN and pihole DNS are connected to wifi2 and is working as it should.

Now the following problem arises: I have a client (amino aria 610X, a TVbox) which does not work if the device is being used via the VPN network. This client is wired only and no static IP configuration is possible. I have managed to assign a port profile to LAN2 on my SG2008P switch and that works good. However, I want to connect my TVbox to my ER7206 directly. This gives me the following error:

What I did was unchecking the LAN2 LAN interface and clicked on save, as that's the port where the TVbox is connected. That doesn't work as the error stated.

I am looking for a way to have the specific device gets an IP address from a DHCP pool (it doesn't matter if that's an 10.0.0.x or 192.168.1.x address from LAN1 or LAN2) and will not get default gateway 10.0.0.254 and DNS 10.0.0.254.

I am kinda frustrated that it works on the switch by forcing a port profile and that this mechanism is also working on the separate wifi network, but not directly on the ER7206.

Does anyone have a clue how to accomplish the above? 

Any help will be appriciated!