@Clive_A This is most helpful, thank you. I have finally got both routers, and both side public IPs. I will set this up over the next few days and update this thread / you. Have a great day.

@Clive_A I am attaching an updated diagram VLANs 20 and 30 have been created in HQ, and I have created "pretend" public ip addresses of 80.x and 90.x You said to not pick vlan 30 in ipsec...I have...

@Clive_A Thanks for your reply. You are right that it is the same vlan. Yes, I want to exclude HQ PC from the vpn, and want to make sure that it only accesses the local ISP. What if I speciy a vlan...

Hello, I have 2 ER7206, and I will set up an IPSec tunnel between the two. These are standalone routers....no controllers. There is one physical WAN cable from the provider on each side. On the...