ipsec

can't say a lot, it's just a mess from my user perspective.

mtu settings (you can connect but not browse)

set the MTU on the server to 1500 or 1280 or something like that. yeah.