I'm familiar with Peplink Drop-In and NAT Modes, but I have a use case in which I need to have two outsourced cisco routers for site-to-site VPNs behind the peplink. Vpn router 1 should have a public IP in a /28 subnet from ISP1 and vpn router 2 should have a public ip in a /28 subnet from ISP2. Also behind the peplink will be the enterprise firewall. Peplink WAN1 will have a public ip in a /30 subnet from ISP1, and Peplink WAN2 will have a public ip in a /30 subnet from ISP2. I think I can use IP forwarding on both WAN ports so that the vpn routers can have their own public IPs without any NAT. My question is: How can I still have inbound and outbound load balancing for the firewall with this topology? Is this supported at all?