Lan1,2,3 and Wifi1 for Service provider, Lan4 and Wifi2 for VPN1

[egc]

Yes, I think so, the interface for tun seems necessary for the PBR package to know what routing tables to make.

About the firewall, if this is a simple VPN client adding it to the WAN zone like you did should be good.

If you have a working solution for your use case please mark that solution as solved:

How to mark a topic as [Solved]

Go to the very top of your topic, i.e. to your first posting Click the pencil behind the topic ===> If there is no pencil and you can not edit the topic title, skip this and jump to step #5 below. <=== [grafik] ===> If there is no pencil and you can not edit the topic title, skip this and jump to step #5 below. <=== Add "[Solved]" in front of the topic Click the checkmark to save the edit [grafik] If there is a specific posting that contributed the most to the solution, you can mark t…