@ANAWA You have to include ALL vlan ip ranges you want accessible to a vpn in its "local networks" config, either as "networks" for vlans that are set as interfaces on the router itself, or as an IP...

@umutsati what controller do you use?

@suzuki22 no, the .6 indicates a different factory of manufacture. they are the same.

@ANAWA You also need to include all vlan ranges / networks in the "local networks" part of the VPN config. And yes, update the firmware!

@dschmitz A LAG can have only one port. This is useful if, for example, you only want an LACP lag enabled port (in "active mode" to be able to connect to another switch, which also has a single port...

@umutsati you dont have this option in switch port profile?