@Ethan-TP Thanks, solved.

Back to square 1. For whatever reason my ER8411 rebooted middle of a night last week. Since then same errors as before - although nothing changed setup-wise (i.e., the working setup with disabled DPI). iPhones constantly again ask for iCloud account verification (which then does not work - only a spinning wheel is presented), Several Apps run into timeouts or claim to have no internet access, some websites are partly non-functional resp. take a long time to present content, etc. Errors do not appear if devices connect to the internet via a VPN, Apps and websites then run smoothly. All of this was not the case with FW1.2.x.

What I also notice is that each router reboot regularly ends in a "PADI time out" situation (connect via PPPoE). This never happened with FW 1.2.x. No idea if this hangs together, but it's an observation made.

Are any workarounds known?

Thanks!

  @Omada Team - Are there already plans re. another / correcting firmware update? 
Thanks!

I am also having a very unique issue with 1.3.6 which i have narrowed down to VPN>LAN conversion - Conntrack / Session Tracking / NAT / De-encapsulation etc - something is messed up

I have a BirdDog camera on a remote site which is ER605v2 based.  Over its otherwise fully stable and functional site-to-site IPsec VPN, THE MOMENT i load the camera's GUI on any client on my main site, the following happens quickly

- All GUI access to anything on the remote site dies - Gateway / Switch GUIs etc all non responsive

- I can still ping everything on the remote site

- Remote site all SDN devices start with a Heartbeat Missed > Adopting > Adopt Failed loop

- Everything immediately returns to normal after rebooting main site ER8411 - until i load the camera GUI again.....

Full diagnostic data, logs etc already sent to the team

Further Testing:

If i terminate the VPNS to a ER7206 v2 or a ER605 v2 and do a route based injection to and from my main network the following happens when i load the camera gui

- Camera and other GUIs work for approximately 3 minutes ....then....

- All GUI access to anything on the remote site dies - Gateway / Switch GUIs etc all non responsive  ...then after about 5 minutes....

- All GUIs work again

- goto top...infinite loop

So - there seems to be some bug regarding this shared amongst models with all the recent firmwares, but ER8411 is the only one that doesnt recover itself to some degree and is the only model that causes the remote sites to go into the adopting loops.  In my case  the trigger appears to be complex multi-protocol devices (RTSP/ONVIF/HTTP/UDP) over IPsec

-ST