@ocbroadband you can't use ipgrup_lan as destination, WAN intefacet doesn't know anything about LAN you have to use IP Port grupe as destinatatioon not your LAN. WAN in doesn't work like that,...

@ocbroadband I don't have a stand alone router, but this is how you do it with a controller. RDP IP-Portgroup is only 3389 Allow-RDP have ip which should have access permit roule have to be over deny...

@j4nd3r53n then I don't know, the port forward that you have created is correct. so then it has to stop somewhere else

@j4nd3r53n then you don't have a public ip, do you have several routers on the WAN?

@j4nd3r53n delete the ACL rule and try again, you should not use ACL when using port forwarding. you must also have a public ip on the WAN interface.

@bambinotenchie but none of them have built-in 2fa, 2fa is managed on an external radius server, you can do the same with Omada routers if you use SSL VPN, I agree that it would have been cool to...