I've just bumped into exactly the same issue as described in https://community.tp-link.com/en/business/forum/topic/628374 topic related to ER8411 router firewall. The ER8411 in my case is deployed in