Hi Jaycee,
> You can go with DFL-210 , we can make the DMZ port as secondary wan interface.
> For VLANs , configure the vlans in the switch and add one port as a tagged member of both the vlans, connect to any one of the LAN port of DFL .
> There are not much difference between DFL-210 and DFL-260 , In DFL-260 you will get one more interface extra than DFL-210.