@nasheayahu how on earth is anyone going to be able to help you with this information. you have a pfsence and eap and an omada controller, ok. you have created vlan on the omda controller you say....

@steven123 Are you sure you don't have a fixed IP on raspberry pi? look at this fil for ip on pi sudo nano /etc/dhcpcd.conf

@Clive_A I have finally managed to set up Wireguard as a client on a ER706W against unifi and wireguard server, it is a complicated task to make this work if you are not an expert in Wireguard. but...

@OrangeStreet global and server settings, enable tunnel relpay for vlan be aware if you have several customers on the same controler. a Radius user can log in with the same account on all sites....

@jandico maybe i have a simple mind but the security test fails with this function on, it doesn't fail when it is off. and when creating a new site, it is disabled deafult do you have a comment...

@jandico Block TCP Scan with RST is unmark by default, with this enabled ther router fail in ShieldsUP scan and is more insekure. so I think the settings you have now is more secure. do som search on...