Improve by applying it ... We need this to work :)

@Somnus Well another posibility is to create a route to the host (omada) over the dmvpn and just allow 80 and 443. But this means it will need a unique subnet per spoke location.

Hi Support, Iam trying to get the following working but am not sure if this is possible with the TP-Link Omada Controller. We have Omada Controller hosted on a Windows server 2022 in our Datacenter....