After 2 days I finally managed to fix my problems to get VPN access to my cameras/LAN. However, I am paranoid about my IPCam and NVR. Just the one camera (so far) and an NVR. I already blocked off all internet access from the IPCam within the Router (RT-AC87U, Merlin) self, under Client Status...