I doubt the traffic ever actually hits the WAN side of the router, it's just some dnsmasq magic going on and the connections are really Lan-Lan (do a traceroute and prove me wrong). So if you can...

@test01 and what is the source IP of the device that is pinging 172.22.2.2? It's subnet would also need to be included in the Local/Remote subnets if it isn't 172.23.1.0/24

@test01 So is 172.2.2.2 a typo and you actually meant 172.22.2.2? Does 172.2.2.2 actually exist (or 172.22.2.2 for that matter)? If so you might need to add 172.2.2.0/24 as a remote subnet.

@RemoteTRX just an interesting data point...shocking...just 10%

@Peter_V Try setting your MTU to 1400 and re-test. MTU setting can be found in the Wired->WAN settings.

@Zealdesign bit cryptic, but I assume you mean this https://www.tp-link.com/us/landing/omada_cloud-based_controller/ (this offer is US only)