@IanRP Sorry - Other info: No Controller. No other advanced features. IPSec Policy is just the auto-created x_l2tp_Server1 L2TP is simply the below, enabled: Remeber - it works fine without the Block...

@Hank21 Doesn't really need a diagram - modem plugs into single WAN Port1 configured on ER605, WiFi AP on Port 2 and NAS on Port 3. Rules are below - L2TP/IPSec VPN works with (a) No Rules at all;...

@Hank21 Oh Right - so just like the OpenVPN promoted on the box that also requires you to double your investment with a controller because they didn't explain what the little "*" means on the...

@Hank21 IPGROUPS would be the obvious, and ideal, mechanism to tailor admin access across the networks, so forbidding it just on the LAN>LAN makes no sense to me. This is standalone mode. Does a...

@Hank21 1. The purpose is to ensure that only expected, legitimate traffic is allowed in from the WAN - so ALLOWING the required ports and then adding a general DENY rule is, I thought, quite...

With WiFi already part of the main LAN, I added a second network "OFFICE" to keep things like business NAS separate. I assumed I could create an IPGROUP of my notebook and mobile devices that are on...