@K_verb You may need to replace the switch to another managed switch like TL-SG2008. TL-SG1016DE does not support management VLAN and it's web interface can be access from any VLAN.

@DarLynn If there is NAT in front of the tp-link router, you can open port 500,4500 for the tp-link router WAN IP(on the front router). The IPSec can still be built up through NAT.

@s_track From what I know the SFP cables are designed for SFP+ port, work as stack cable. But your switch only support 1G SFP port, not the 10G SFP+. I think you can consider TL-SM331T, it's...

@Family_AM Try only use 5Ghz wireless, disable 2.4GHz

@Jorinf Remote Gateway is your remote side router's WAN IP address. It must be a public IP. If you don't have static IP from Internet service provider, you can use DDNS function to bind the IP to a...

@depuits You can't modify the default system profiles. To enable STP you need to recreate profiles; I only enable STP for uplink and downlink ports. But yes you can enable it on all ports. STP won't...