@Otavio_Rievert And both have public ip on wan interface? no manual route added on UCG or ER605?

@Otavio_Rievert Setting up a VPN to a UCG is quite simple, you have to make sure that you use a route based on the UCG, you should also not create any manual routing on the UCG, many people make this...

@Ethan-TP Hi, there is no download link in this post. https://community.tp-link.com/en/business/forum/topic/844434

@ultimatex There is no client mode on Wireguard, if you are going to connect to another Wireguard server you have to configure this manually in wireguard/peers configuration, there is no import of a...

@Pablo_PL on the deny rule use ip group instead of ip port group on source and destination. on the other two use ip group on source and ip port group on destination and the first rule is not needed...

@ZoloNN it sounds more like there is something misconfigured in your SD-WAN. HUB must have public IP, Spoke Device can have private IP. Try deleting SD-WAN and configuring it again. remember that...