Hi Does it depend on any other recent changes? I have backported v1 of the offload-series to 5.10 ([1] maybe i did any mistake there) to have lts kernel running while testing on main-router. Direct lan-wan hnat works,forward to pppoe is broken (i can apply with wan/lan physical devices,but no traffic through ppp).on client i get connection-reset,pppoe session on router stays alive. This is an entry from the mtk entries (mt7623): 01ac6 UNB IPv4 5T orig=192.168.0.21:52136->195.20.250.26:443 new=217.61.147.xx:57010->217.72.196.71:443 eth=02:11:02:03:04:05->00:00:5e:00:01:02 etype=0101 vlan=140,0 ib1=1000019d ib2=007ff020 Vlan140 is correct (accidentally wrote 110 above). Sourceip is correctly changed from private to public. I wonder about etype and target ip. I think target ip should stay same and etype imho should be 88xx (vlan/pppoe-s). [1] https://github.com/frank-w/BPI-R2-4.14/commits/5.10-hnat regards Frank