@Domada basically everything should be blocked on the wan interface so it shouldn't be necessary to block anything, but i use wan local or internet local as it's called on unifi quite a lot to open...

@Domada There is something missing on the router ACL, wan/in does not work on the wan interface itself but from wan to lan, port NAT and things like that will be blocked from country. If I compare...

@GRL I have tested both and if something happens with the VPN it is impossible to fix it without doing a factory reset of the router and starting over. I agree that it is quite poorly thought out by...

@McDProp I was a bit quick now , this rule also blocks local lan, then you have to make a rule for each lan like this you can also do it on the gateway, same procedure, with gateway acl you will be...

@McDProp Goto EAP ACL

@Cepheus0815 you only need a controller, switcher and access points you can adopt in the vpn tunnel, but i would not recommend it with the router. it is a very complicated procedure and if something...