@Otavio_Rievert here is an example that I made now, it is an ER707-M2 behind NAT that has VPN to a UX7 with public IP

@Otavio_Rievert set whatever you want, but you must have the same name on both routers, set for example ER605 or 1234

@Otavio_Rievert if you have ER605 behind NAT then you have to set it to be initiator. local id name on ER605 you set to Eg ER605, on UCG you have to set Remote Authentication ID to ER605, it should...

@GRL unifi is not so good at IPsec there is also very little configuration, for example you can't choose local network, only remote network. so all VLANs will go in the tunnel it causes a lot of...

@Otavio_Rievert And both have public ip on wan interface? no manual route added on UCG or ER605?

@Otavio_Rievert Setting up a VPN to a UCG is quite simple, you have to make sure that you use a route based on the UCG, you should also not create any manual routing on the UCG, many people make this...