@Javito Its not about routing rules, its about including the other IP ranges in the IPsec VPN tunnels Since router A is the "hub" location for all VPN tunnels, as long as it can see all the IP ranges...

You can create a location group, selecting all countries except the ones you want to allow access from, and then set up a gateway ACL rule like this [Block] Source - Location Group Protocol - All...

@Chrisasnyder Make sure you have trunked all ports between gateway and EAP to carry the untagged 1st vlan and the tagged 2nd, make sure you set the SSID vlan tag correctly, and this should just work

@bish0p I tested this over an IPsec VPN I was able to use the sever side gateway as DNS server, but i could not access any configured LAN dns set up at the other end - probably because when setting...

@MarkAGregory The module doesnt negotiate with the switch, the SFP+ side of the module is FIXED at 10g, the switch has to match. You can test this by plugging it into a SFP (not plus, 1g port) and...

@MarkAGregory SFP+ ports dont support auto negotiation, and this is the same with any vendor. If you use DAC cables, you must specify the port speed manually, if you use modules, you leave the ports...