GL.Inet AR300 dTD question

Patrick, I'm not sure you got an answer to your question, so I'll throw this out there to see if it helps at all.  The GL.iNet AR150 and AR300M16 devices both have only two Ethernet ports, so the AREDN "baked in" firewall rules for both devices are similar.  The left-most port on both devices is configured as a WAN port which is intended to be connected to your home network which provides access to the Internet for your node and any LAN devices connected to your node.  There is no way within the AREDN web interface to make that port anything but a WAN port.

The right-most port is configured as a LAN + DtD port (VLAN 2).  Typically you would plug in a device like a laptop or phone and the DHCP server on the node will give that device its IP address on the node's LAN network.  You can also plug in an Ethernet hub or dumb switch to make more ports available on the node's LAN segment.  But you could also plug in a second AREDN node and then the two nodes will automatically discover each other and create the DtD link.  So that second port can do double duty as both a LAN port and a DtD port.  These two GL.iNet devices are unique in this regard.  Hope this helps.