Hi community,

Here is my question / problem.

My setup is the following.

VR400 connecting to my ISP (DSL connection), then a router connecting on LAN4/WAN interface to do the authentication. 

For the management, I first connected Lan 1 onto my router in order to have the management interface available from within my network... but for some reasons, it caused some network havok and I had to remove the connection. Which brings me to another problem, if not connected to my internal network, how can I manage it?

So, for the management interface (e.g. the interface where the web console is available from) I'd like to restrict it to LAN1-2 or 3 but not 4 as it is used for the internet connection.

My idea was to group the interfaces into a VLAN (e.g either Lan1-3 together or Lan4 and the bridged interface together) just to prevent unwanted traffic and add some security whilst giving me access to the management interface via local address. 

I've been looking in the doc and various forums/website without finding an answer... 

So, is it doable ? And if yes, how could that be achieved ? 

Thanks in advance,

TheFx1