I've got an interesting one here.

A block of flats with an ip door entry solution with a 2860 running the network, this is feeding into the individual flats on their wan2 connections depending on their routers.

My customer is fed into a his 2860 on Wan2 and I have got this working perfectly on the bench.

What I need to add is an internet feed to the door entry network from my customers 2860 to be able to remote administer the system when required. I have just tried this by adding a vlan to the customer router on a 192.168.2.xx network feeding into Wan2 on the door entry 2860 but it created a big network storm and shut everything down.

Alternatively I need to setup the firewall rules to allow each flat access to just two devices on the door entry network. My customer flat needs full access the setup so I have full access.

This is where I need your assistance as I'm sure it is a very simple configuration addition.

Tried Draytek technical support and they don't seem to get what I'm trying to do.

Does this make sense?