Thanks to all your advice I now have changed my router to a Unifi UDM-US. I'm setting up VLANs and about to switch my current DVR from 192.168.1.* to 192.168.3.. I took a look at the network setup for the DVR and it is set to a static IP. Perhaps this is a remnant of the port forwarding that I disabled and no longer want to use. I will VPN instead. If I left it static and changed my UDM to now connect it to 192.168.3., I fear I would be locked out of it and the unit is only reasonably accessible by LAN. Should I change the mode to DHCP and restart before I implement the new VLAN IP?