EDIT

  @btx No problem. I can't type mobile either.

  @btx So I pulled out an old Asus RT-AC68U router that I no longer use and was able to flash it with DD-WRT as a test bed for a gateway. Since DD-WRT would allow me to configure things I could not with ExpressVPN's firmware. The way I look at it, I can try several things but would obviously like some input.

If I stay with ExpressVPN I can set up OpenVPN. From what you've said and what I've read this could really slow down my speed. We have a 1G fiber connection in our house and this feels like a waste.

Another option would be to try a different service and use WireGuard which seems to be be the future of VPN protocols.

 EDIT

  @btx I appreciate you hanging with me and being able to help out.

I am open to trying other services other than ExpressVPN but I would rather not have to setup and rent a server.

Like you alluded to, I do have a 1G connection and I top out around 180 mbps through ExpressVPN. Right now my network is not where I need it to be. I cannot ping from the ExpressVPN router to other VLANs which is far from optimal as I do need some cross subnet funcationallity.

If I were to get anywhere near 1 gig through a VPN service would the Linksys WRT3200ACM be able to accomplish this or do I need to purchase or build some hardware? It sounds like you run your VPN connection through a Pi of some kind. I assume whatever device I need that would come directly after the WAN and then into the Omada Router?

EDIT

  @btx First off the system will not allow me to direct message you because it says you have not permitted it on your end.

I've gone ahead and tested this on an old router I had which is an ASUS RT-AC68U and I was able to get it to work by using the following guide.

https://www.youtube.com/watch?v=04q41GEPvKA

I am located near Knoxville, Tennessee and through the NY server I was able to get around 150 mbps up and down. When off the VPN through this router I was getting a baseline of 400 mbps. Now keep in mind I don't have this router plugged in directly to the modem and it is going through two routers and the Omada setup. Typically I can get about 900 mbps with the Linsys Router when not connected to the VPN.

Do you think I would get better results by building a Rock Pi 4 setup like you have or would the Linksys have plenty of horsepower? Are you running OpenWRT on your Rock Pi 4 and going from that to you router and into the Omada?

Finally if I go this route I think I will have to switch VPN providers as ExpressVPN doesn't support native WireGuard like you have said in the past. I would like to discuss further in DM if possible.

EDIT

  @btx So I was able to test our the VPN service we talked about in the PM. Getting about 800 down and 500 up. Not sure why the difference up vs down on a fiber line? But the real problem I am having is implementing the OpenWRT router into Omada.

ISP -> (in on Wan) OpenWRT VPN (out Lan) -> (In on Lan) ER605 (Out on Lan) -> Switch

I have the OpenWRT setup as 192.168.0.1 with DHCP turned off. ER605 is setup as 192.168.0.2 (default gateway set for 192.168.0.1) with DHCP turned on. As you know the default LAN in Omada is 192.168.0.X and everything works on this LAN. The VLANs, however, have no internet access and I can't even ping them. I am thinking it has something to do with the OpenWRT router and maybe the firewall settings, any help anyone can give would be appreciated. Thanks.

EDIT