Once you get this up and running, have a look at https://github.com/moeller0/lantiq_dsl_parser. This should allow you (with octave) to get some diagnostics and statistics out of your router from a machine inside your network, to plot SNR and bitloading over the frequency bins. Please note that this is work in progress that has seen zero testing outside my own VDSL2 link and will change in the future (as it currently queries way to much and hence also takes too long).
Now I can also access the modem through the router (at least the web GUI, SSH doesn't work yet). I assigned my dsl_modem on the Archer C7 to the WAN Firewall zone.
Thanks everybody and especially @trendy trendy for all the help.
For reference here my Network config on the router Archer C7:
if dsl_modem interface is in the wan firewall zone in C7 then it will be NATed on the egress, so all hosts in the LAN will be able to access the DM200.
SSH should work along with web gui, there is no difference in how packets are treated. Check if there is an access list for SSH or if SSH is listening on this interface or if firewall is blocking it.