@mbze430 I have a ER8411 and use DPI, only app I block is tiktok, but I do a test with facebook to and it block right away. Are you sure you have it set up correctly? it can be a bit fiddly to set up.

@ZIZOU94 Try this

@Stariaa I just configure same vpn.. folw this and it will work This is site with WAN on router and this is router bihind anoter router and have no piblic IP on WAN interface. You dont need to do...

@Stariaa Do not use port NAT, delete all NAT, and try again

@Stariaa Change proposal to SHA-256 - AES256 - DH14 on both site, they have to match. now you have SHA-256 - AES256 - DH14 and SHA-512 - AES256 - DH14 and that will not work

@Stariaa Proposal is not the same. and local id on one site same name on remote id on other site. you cant use local id on both site. in short, local id on site with no public ip and remote id on...