jrp wrote: I had thought that if you disabled remote management (or rather, didn’t enable it), port 80 could be used on the WAN.

I had assumed that the 5G password was the same as the 2G one. It would be good to see where the draytek’s logs are, to see what it is doing it its end. I’m trying to set up a site-to-site vpn. There are some good docs showing how to fill in the relevant forms, but nothing about where to look to see what’s going on.

I have remote management disabled, and changed the admin interface to run on 8080 internally. I redirected port 80 of on my WAN IP to that of my CCTV unit for remote access.

2.4 and 5 wifi passwords can be different. I have no issues with 5g from my AP910c to my iphone SE (rather old tech now, I'm afraid)

I've got several site to site vpns and dial in VPNs running - generally following the guides and making sure you have the correct passwords and keys entered and all will be good!