Yes, in fact it was on 4443 so Synology could get responses from Let's Encrypt. Will try 8443 - but just for the hell of it. ;-)

It's interesting... but I'm sure you have better things to do.

Every day is a learning day - some harder than others.
Certainly looks like it's at the hardware/protocol level.

I've been in this IT game long enough to try the old switch the bu**er off and back on again routine just so see. Stranger things have happened.

Much appreciated. Have a great festive season. Cliff

Lol...if it was already on 4443 then didn't you think it might be helpful to tell me that otherwise I was never going to be able to connect was I ?

Thanks.
There are indeed Syslog Entries now.
Duh!  Sorry, I hadn't realised that it hit port 443.  Don't ask me why but that's why I was targeting the WAN Ip address and I wasn't sure the root port number for VPN.

It uses a different port on Synology and I (duh! supposed that to be the default).   What a Complete Numpty I am as we say in these parts!

As I said, I had previously suspected that I should hit a specific port.

Will play with 443, as you say, to get some life into it.

Very much appreciated - I said it'd be something fundamental!
Kind regards,
Cliff
 

Seems I got XAuth to work too once I set the port back to 443. Kinda scuppers my Synology solution tho' cos I've tried even SSL option with a different port but, so far, with little success. Obv. that won't stop me now that you've helped shift the basic log jam. slanj-a-va!
Will nail this then offer to update the Draytek Guide

You just need to create a NAT / Port Redirection rule to pass traffic coming in on 4443 through to the Synology IP...

I think the Draytek guide is more or less fine - as long as you understand the concepts involved.  I'm beginning to think you're new to this side of things because the answer for your Synology here is pretty much as basic as it gets...

Please close this topic.  Thanks

Oh, and if you could tell me the best way to present to you an updated version of the MacOS to IPsec-XAuth setup Guide, I'll happily provide that once I iron out the remaining creases.

Happy to do the same for MacOS to SSL-Tunnel too if you wish.