@rayvoll Yes, that is totally OK. The port on the EAP is just a normal ethernet port.

@bsz Did you put the permit rule in the first rule and put the deny-all rule in the last? How do you test "an ACL by permitting TCP Protocoll from one IP-Port-Group to the other -> does not work"?...

@AhmetAkkaya Some data on the controller page is auto refresh, what specific auto refresh you want?

@liljeffylarry Uhm... I haven't such complicated VPN settings, maybe delete all VPN settings and re-create them is a better choice. But it will be a long time.

@dbdan22 I don't think the EAP is available in your network, the signal is hard to go through the concrete floor. Maybe 2.4G is much better, but 5G is not. Do the ground floor and the basement use...

@liljeffylarry Hi, you need to change all VPN settings which are related to the site4 WAN ip, because the WAN IP changed and those VPN rules didn't work either. Suggest you bind the WAN IP to DDNS or...