@mxk77 Not sure what else it might be, i switch route on a SG3428X and a SG3218XP-M2 and both are operating normally on the vary latest firmwares. Have you tried a forget > adopt > reconfigure on...

@AlokJain Gateway = Router Switches are not routers. Switches can do very basic L3 forwarding using static routes, but not actual ISP failover, NAT etc, you need a gateway for that

@lukass2000 I dont believe that Omada gateways support tunelling VLAN traffic through an outgoing OpenVPN connection. Wireguard it can

@BjornPython Its actually in the settings for each site Load site > network Config > Site Settings

@Yann77 Its still in prerelease but you can get it here https://community.tp-link.com/en/business/forum/topic/853890?moduleId=3

@aaronread1 You set it up on the port forward itself. Port forwarding is higher priority than ACLs so it always takes effect regardless of ACL rules.