@AJC01 no no ports should be opened. when it works you should be able to ping gateway ip from lan to lan, if you get a response then vpn is established

@AJC01 Do you have a public IP on the WAN interface of the router? You must have that on both routers or it won't work.

@AJC01 first you should get the vpn up and running then you can concentrate on ports then. but to block and open ports you use acl which is also described in the manual i would think

@AJC01 you want IPsec site to site, or lan to lan as it is called in stand alone, It's pretty simple, make sure you have a public IP address on both routers, then go to page 153 in the manual. I...

@William_Wong you can't mirror a port with itself, choose one of the other ports

@Berg-UA Have you tried adding a picture, nothing is there?