I’m attempting to use the same mode and therefore use the device IP rather than the MAC address. I admit to not knowing how the policy would treat a device IP if it’s expecting a domain address…