The issue is in creating the NAT in the first place. Dashboard throws the error when trying " destination IP must be in a  locally configured subnet".   This same function would also be beneficial for other services at the branch, so worth some time to figure out.   Particularly with the voice service,  the call manager is bundled with other features required to be onsite. Particularly a phone may only register when on the same broadcast domain as the call manager. FYI, The voice solution is Unifi and the product is Dream Machine. ... View more

I am not too familiar with the SDWAN feature, however was initially dismissive as it seemed more for the purposes of Quality of a service,  while I was just aiming at the service alone thus far.   I do note the following in the reference provided:   PbR with Performance Failover for Web traffic Web traffic is another common type of traffic that a network administrator may wish to optimize or control. This branch will leverage a PbR rule to send web traffic over VPN tunnels formed on the WAN 1 interface, but only if that matches a custom-configured performance class.   So far, I was concerned with any connectivity over the service port.   As to SDWAN being an option for me, I do not see an obvious barrier in my case, having MX/Z3 at the respective sites.   However it is not clear to me exactly how SDWAN fits into the solution. Can you ellaborate? ... View more