Hi all, I've ended up going for the RB850Gx2 with Mike because it has the Atheros8327 switch chipset. This is the same as the RB2011 unit that it's replacing, which means that the switching performance & configuration should be closer and the 850 has faster IPSEC than the 2011. Cheers, Chris