Hi @dgabler 

Thanks for posting in our business forum.

Can you give some more details?

On the WAN, is it a public IP address like the UBNT? Your config details as well.

You can also refer to the following links to review your existing parameters:

How to set up L2TP / IPsec VPN Client on Windows PC and MacBook

Why my Windows PC cannot connect to TP-Link L2TP VPN server?

How to establish an L2TP Server by Omada Gateway in Standalone mode

Please mosaic your sensitive information. Here is a list of information considered sensitive:

1. Public IP address on your WAN if your WAN is.

2. Real MAC address of your device.

3. Your personal information including address, domain name, and credentials.

For troubleshooting purposes, when a WAN IP is needed, please leave some values visible for identification.

  @Clive_A

|  On the WAN, is it a public IP address like the UBNT?

It is exactly the same as the UBNT for the public IP configuration. The only change on the network is a drop-in replacement of the ER605 for the USG.

| Your config details as well.

What specifically and how to get the details you desire (screen shot etc.)  Tried decrypting the backup.bin file but have not found the encryption key yet to do it.

Hi @dgabler 

Thanks for posting in our business forum.

dgabler wrote

  @Clive_A

|  On the WAN, is it a public IP address like the UBNT?

 

It is exactly the same as the UBNT for the public IP configuration. The only change on the network is a drop-in replacement of the ER605 for the USG.

 

| Your config details as well.

 

What specifically and how to get the details you desire (screen shot etc.)  Tried decrypting the backup.bin file but have not found the encryption key yet to do it.

 

 

We don't have methods to decrypt the backup .bin.

You can upload some screenshots of your VPN server and client setup.

  @Clive_A 

Ahh Ok slight confusion then, apologize.

I am NOT using any of the ER605's VPN configurations.

I have a client system on the LAN (window 10)

Client system is trying to connect from LAN to a l2tp VPN server on the public internet.

When the traffic passes through the ER605 the vpn cannot be established by the windows system.

IF I replace the ER605 with the old UBNT USG, changing nothing other than the router, the client is able to establish the VPN session.

It seems to me that there the ER605 if blocking the VPN traffic originating from LAN ports on its way to the internet (or something with NAT rules is missing)

All of the other NAT tabs (one-to-one, virtual servers, port triggering, nat-dmz) are blank and only have '--' in them.

  @Clive_A 

Here is a capture showing where 'things go wrong'  at the 12th packet the connecting diverges.  Good UBNT is on the right, bad TP-LINK on the left.

Downgraded to 2.2.3 and no luck

downgraded to 2.2.2 and no luck.

Will be returning this product.  Software has a bug that does not allow L2TP passthrough for clients on the local LAN to internet servers