did a test here against the ER605v2 and an ER707-M2 both failed against my android phone. same config from PC, vpn worked against both routers. I also tested android against openvpn on an openvpn...

@TzTerri yep, backup takes all settings on controller.

@nicolati Enable Tunneled Reply in server settings for vlan support.

@SteveMann it should work. you must restart the device that will have the IP after you have added the reservation

@d0ugmac1 you can make lan to lan acl on all the routers but the problem is that you can close everything or open everything but not open or close individual ports. so tp-link has not realized that...

@LoveOmada I have a similar issue, I have tried everything without success with anything other than 0.0.0.0/0 when you can route a single network, you probably have to look at acl to limit access...