@N17 ' If you use IPsec, you cannot route all traffic through the VPN Tunnel, but you can do this with Wireguard site to site quite easily.

@Warry95 no it is not possible, rumors say that there will be policy routing for OpenVPN and Wireguard in the future and then you might be able to do this. but until then you have to find other...

@Otavio_Rievert here is an example that I made now, it is an ER707-M2 behind NAT that has VPN to a UX7 with public IP

@Otavio_Rievert set whatever you want, but you must have the same name on both routers, set for example ER605 or 1234

@Otavio_Rievert if you have ER605 behind NAT then you have to set it to be initiator. local id name on ER605 you set to Eg ER605, on UCG you have to set Remote Authentication ID to ER605, it should...

@GRL unifi is not so good at IPsec there is also very little configuration, for example you can't choose local network, only remote network. so all VLANs will go in the tunnel it causes a lot of...