No other changes beyond quickset. Trying to support someone in setting up their router themselves that I don't have access to.
I see, perhaps if I assign an LT2P Server Binding for the "vpn" user and add it to the LAN interface list it will work! Will try and report back.