@guyd2 The DHCP server isnt actuve in that it doesnt forcefully start handing our IP allocations. It is a response service - a client must go "give me an IP" before it responds. I have a few devices...

Tested on: ER8411 1.3.2 ER7206 v2 2.2.3 ER605 v2 2.3.0 I havent tested other types of VPN clients remotely conencted, only IPsec clients (both site-to-site and client-to-site both exhibit this...

@Perondas Do you have an WAN-IN or LAN>WAN gateway ACLs at either site blocking ports 22. 80 or 443? - or if the devices are behind a L2+ / L3 switch do you have any switch rules blocking the same?

@DerChivas i double checked (i hid the MAC column before) You are completely right! I can see no underlying pattern to how these are ordered. Its not by name, IP, mac, network, uptime, download,...

@ceejaybassist Switch ACLs are NOT stateful - when you block one direction, it inherently blocks responses as well This is the reason your first rule isnt working - it does in fact allow vlan 10 to...

It is missing some obvious categories - Phone (for desk and voip phones, not mobiles) - Payment Card Terminal - AV Equipment (AV recievers already exist, but im on about things like web controllable...