@JohnO_O In my opinion, ER605 router is doing "something behind" that users can't control (trying cloud connections to OMADA, or whatever....). If I ping from my desktop PC (wired connected) to ER605...

@minks1 In my case I'm blocking from IOT's Vlan to LAN Vlan using Firewall - Access Control, and is working fine (IOT's Vlan have internet access).

@ispeaknousa IMO the mask should be 24 (192.168.0.1/24 192.168.0.0/24), and reach networks via NAT/Firewall and not via mask.

@ispeaknousa Why are you using your local mask as 16 bits and for VPN mask is 24 bits, running in the same network addresses/segments?

Thanks @Hank21 for your help,

Hi developers, Will be great in a future firmware versions to add some new functions for VPN: - In OpenVPN + L2TP possibility to change encryption from default AES128 to AES256 or etc... - In IKEv2...