I have finished my testing, rebuilding everything from scratch, and made the discovery of what is breaking VPNs, on my system at least Things i did, in sequence Factory reset Gateway, Switch, EAP...

@rlp122 Does your ISP connection need a VLAN tag? some do

@D-C I agree - it isnt perfect, but its also more felxible than the old way of doing things - no need to make a new profile for a single port - or - no need to have a profile override on a single...

@MR.S Yep, weird, but thanks for confirming the issue All my omada gateway and 1 draytek gateway hosted client-to-site VPNs dont work behind the ER8411 or ER605 v2 I set up a test vpn on a friends...

@MR.S I have also tried: Disable DPI Disable ALGs Disable DNS Cache Disable DNS Proxy Disable all firewall attack defense settings I have a bunch of colleagues who cannot usilise our second site...

Nope, no difference I have also confirmed the other posters thread that L2TP isnt passing through either