@NinjaCode of course you can use any firewall you want, but it cannot be adopted into TP-Link's Omada system.

@Navas I see that it is mentioned on openvpn but not wireguard, but that is not true, it is not possible with a domain name. that's life. You will probably have to find other solutions to your...

@Navas you can not use router as Wireguard client against a wireguard server. the problem is the router interface public key which cannot be changed so that it matches the one you have on the server....

@OrangeStreet so far so good

@mgaray07 The ER8411 is a very good router for many things, but on OpenVPN it gets beaten. so don't have too high expectations for OpenVPN on ER8411, I have the same experience as you, about the same...

@Sam_CS the person who wrote the guide was probably a bit hasty and did not test with several peers. same thing with unifi routers, always /32 on ip in vpn tunnel.