Hi.
My ISP has a NAT system so I don't have a real Public IP. I want someone to find a way to setup a VPN tunnel with IPSEC or OpenVPN (or WireGuard). I think it's possible so long as the originating side if the NAT'd side and the non-originating side allows connection from 0.0.0.0 (or any IP).
NAT'd hardware side = TP-Link Archer VR1200v (1st choice) or [login to view URL] MT300N V2 (alternative)
Other side (Dynamic IP from ISP but no NAT)
Unifi USG
If this cannot be done, the other choice on the no NAT side is pfSense. Last choice is pfSense on a dedicated Internet IP.