Alright, looks like TP-Link just doesn't support this, which is a huge PITA. As it turns out, I can't mix WAN and LAN VLANs on ports, which is possible on the hardware, there's just a poorly written...

I have a local server on my network, call it 192.168.0.2. This Linux server has an OpenVPN client running that connects it to a cloud VPS (call it 1.2.3.4). The VPS is configured to forward traffic...