I have configure OpenVPN and connected 2 routers together creating a site-site VPN, it's all working great I can RDP into my lab without issues and the LAB servers can hit my desktop from their side. My only problem is that it seems that either the routers or OpenVPN are blocking ICMP (and other but for simplicity I'll stick to ICMP), I can RDP to a server just fine but can't ping it, within the LAN it responds all day long. It seems that there is 3 modes for the FW setting "Auto, External Only, Custom" however Asus didn't document what each one does.