Hi @rom27654 

Thanks for posting in our business forum.

When you configure the VPN for site to site, you configure the local and remote network, that's where you define the VLANs accessible for another site.

rom27654 wrote

 

1. VPN Setup: What’s the best way to set up VPN between the two ER605 routers to ensure secure and reliable connectivity? Has anyone had experience with IPsec or OpenVPN in this context?
2. Starlink’s Public IP: Since I have a public IP, should I expect any additional firewall or port forwarding configurations for Starlink, or does the bypass mode handle this well?
3. VLAN Configuration: What’s the recommended way to configure VLANs on the ER605 so that only the intended VLAN traffic is accessible from the remote site?

 

Any insights or examples from similar setups would be hugely appreciated! Thanks in advance for your help. 😊

Not really sure what you mean best way. VPN is a secure and reliable way, regarding what kind of VPN types, usually, site-to-site is based on IPsec as it is designed for the site-to-site.

If you get the public IP address and it displays on the router's WAN interface, then you don't have to configure anything. Just VPN and make the connection.

You don't have to configure VLAN. As you have created the VLAN interfaces beforehand, you just configure the VPN and pick the correct remote/local networks for the job.