The below instructions come with no warranty implied or expressed and are not endorsed by Cisco Systems, Inc. It is recommended that you have sufficient experience and knowledge of the individual settings being changed before doing so and that you have a security plan in place to support the capabilities being disabled as needed for your environment. WARNING: Following the actions below will disable any protections provided by the 5268AC for all devices downstream/connected to the 5268AC. The closest analog would be 'half-bridge'. These things are anything but 'standard'. The fundamental problem is that these devices are designed to support a managed residential set of services (triple-play) and you and I are thinking in terms of standard networking devices. I was on Comcast and the cablemodem had a 'bridge-ish' mode and the terminology they used was different from the Pace/Arris but provides similar capability. If you guys have any insight on what I'm trying to do or if this is even possible, I could really use your assistance. I can route the internal LAN out of F0/0 with Nat inside/Nat outside, which works but gives me a double Nat. I've tried a lot of nat configs and cannot accomplish this. My goal is to get the internal LAN to route out of my router IP for the static ips (45.29.x.158). The F0/1 of the 2811 has 3 sub interfaces and is trunked to the 3750 switch: The att router is connected to the 2811 on F0/0 with IP of 192.168.1.217. I'm trying to figure out how I can also route my internal LAN using the 2811 and not double nating with the at&t router. I was able to pass my static block of ips from at&t using "cascading router" to my 2811. I'm not really sure if what I'm trying to accomplish is possible, but here it goes.