I have ATT fiber, which is terminated by an ONT box and an Arris BGW210 router. ATT insists I use the Arris router, which is a BEAR to work with. In order to use my own router, I put the Arris in pass-through mode and connected my Netgear Nighthawk's WAN port to a LAN port on the Arris. After a lot of fiddling with subnet numbers, all works just fine. Now I'm going to install a new router with built-in VPN. However, I need to keep my ROKU boxes off the VPN since some providers (e.g., HULU) do not allows VPNs. SO, what I want to do is keep the ROKU devices on my Netgear and put everything else on the VPN router. Can I do this by simply connecting the new router's WAN port to one of the remaining LAN ports on the Arris (and by changing the local subnet numbers?), keeping the current Nighthawk connection as is?