A few improvements suggested to the PPPoE WAN configuration. Neither an MTU nor an MRU value should be required, instead one must accept blank to mean the PPPoE software defaults, not some value...

@yorkman openVPN is simpler than IPSEC.. IPSEC is faster if correctly configured, but is vastly more complicated and easy to get wrong. not to mention the amount of code required for its...

@shberge Note though wireguard client WILL NOT use DNS again once it has established a connection.. IT WILL NOT see the server has changed address unless you reconnect.

@Matze78 I also use one "discontinued" switch (that I really bought by mistake) and it has kept working after all upgrades.. I expect it to continue working but not support newer features.

@Jeesoon1 You are adventuring yourself to realms of high availability enterprise vpn. . all effort is futile if you do not have stable connectivity (i.e a written contract with your ISP that says...

@Hoamboy er707-m2 looked like a keeper until read that the SFP port is gigabit.. I do not need Ethernet 2.5 WAN ports! .. need SFP 2500 BaseX to plug a Fiber module