Clive, an update on this from my end I was starting to see issues with other sites VPNs as well, all remote sites are now on ER605 v2 running 2.3.0 Issues always resolved on all sites when i rebooted...

@sv3063h If you are running a continious ping when changing the rules, the gateway will still possibly allow the traffic to pass, even when the new rule takes effect as it is seen as an existing...

@n0sh1t this only carries over WAN settings, he doesnt want to have to reenter 67 NAT entries, which will not get pulled accross.

@nurix There is no username and password functionality for IPsec / IKE v1/v2 VPNS - they rely on the local and remote IDs as configured in the vpn server configs. Usernames and passwords are o0only...

@GRL Yep, saw this last night and already updated to it Havent seen any strangeness with the port now, but i only rebooted a few times to test.

@Pablo_PL Do you have an omada switch on the network? switch rules only work on switches, not gateways