@D-C I agree - it isnt perfect, but its also more felxible than the old way of doing things - no need to make a new profile for a single port - or - no need to have a profile override on a single...

@MR.S Yep, weird, but thanks for confirming the issue All my omada gateway and 1 draytek gateway hosted client-to-site VPNs dont work behind the ER8411 or ER605 v2 I set up a test vpn on a friends...

@MR.S I have also tried: Disable DPI Disable ALGs Disable DNS Cache Disable DNS Proxy Disable all firewall attack defense settings I have a bunch of colleagues who cannot usilise our second site...

Nope, no difference I have also confirmed the other posters thread that L2TP isnt passing through either

ER8411 Firmware 1.3.3, 1.3.5 and 1.3.6 & ER605 v2 Firmware 2.3.1 – VPN Passthrough issues Testing began on a completely factory reset ER8411 running 1.3.6 – no configs. Not even the initial login...

@mdede I can confirm this with er605v2 2.3.1 AND er8411 1.3.3 and 1.3.6 released to controller today I will do a full write up when I get home In my case external ipsec client to site vpns on macos...