@eab69 If you have disabled NAT, you will have access to the management interface. When NAT is enabled, you really only have one router. You must block WAN/IN, otherwise your entire network is...

@Obsanity There is no policy route on either wireguard or openvpn yet. So with wireguard it is all or nothing when the router is a pure client, openvpn has a bit more choice, you can choose source...

@shorthouse06 you are right, you can only have one on each wan interface, why it is limited to only one I don't know

@eab69 you must be doing something wrong when testing, everything is blocked from wan to lan if you haven't opened up any rules, port forwarding to 80 and 443 should also work without problems. so...

@joemanderson01 I had an SFP+ to RJ45 lying around so I tested it, it worked fine but I had to set the port to 10GB since it was set to 1GB

@joemanderson01 I am using controller version 6x.xx. You go to device, press ER8411, select manage device, goto ports, and press the SFP port.