@th1950 I don't think it is possible to route all traffic in an IPsec sit to site VPN, it will only work if you use L2TP or PPTP and policy route. it is not possible to create policy route through...

@busyB Do you use pivpn? Somethime I have to run pivpn -d to fix somtging after install, then everything work as expected.

@Pascal sorry, I don't have the opportunity to test in stand alone, it is sad that there should be so many problems with the so-called enterprice router. it doesn't seem like tp-link cares that much...

@Pascal it seems like this is a controller bug, I have v 5.9.9 and get the same error on the ER605,v1,v2 ER7206 and ER8411 sites

@DocPMD the only possibility is to wait for 5.9.9 to OC200 before you migrate, or start from scratch on a new controller

@kkyyww I use Firmware Version: 2.1.2 Build 20230221 Rel.41247 but I have alway have good site to site speed on ER605v2,