I have an Omada setup with OC200 controller and Omada wifi access points. 

I have a NordVPN account and I successfully got a tunnel working on the ER605. 

I created a LAN (interface, not VLAN) with ID 10 called VPN and DHCP and assigned the VPN connection to that. I then created a WLAN assigned to LAN 10. 

When I connected my computer to the WLAN, I found that speedtest was showing my provider as NordVPN, but it was connecting to a server in Spain. 

I also did a DNS leak test which showed the NordVPN DNS, but also Spanish DNS that were clearly associated with my Starlink connection. 

The idea is to let any device connected to the tunnel use the VPN connection. 

To the best of my understanding, a VPN tunnel would count as an interface? In which case, if a VPN connection is live in the ER605, should the VPN be listed as an interface to tick? As it stands, I tick WAN as it won't allow me to have nothing ticked. Is this the source of the problem? 

Excuse me if this is a bit garbled. Looking forward to your response.