@RF_Dude my current, working profile (with sanitized WAN IP): client dev tun proto udp float nobind cipher AES-128-CBC comp-lzo no resolv-retry infinite remote-cert-tls...

For closure and for others with similar issues: The problem was not related to CGNAT - and in fact, I don't have CGNAT at all (which is clearly visible in the tracert output I shared earlier). Still,...

@RaRu and this is the point. I have a static public IP, payimng for it and it was working fine for over 10 years. Few days ago my ISP changed my IP and it is still public, still static, but behind of...

@RaRu no, I haven't dynamic IP, it is fixed public address, but unfortunately currently behind CGNAT. I can try, but is there any chance that OpenVPN on Omada router will work through cgnat?...

@MR.S could you recommend something, from these available? I need a vpn client-site, working with windows and android.

Ok, will try, but have a question: in the meantime I found that my ISP not only changed my public IP, they also put me behind CGNAT. I will try to argue, but what if there will be no way to have back...