I should note:
- eth0.2 is masqueraded-NAT, because of BCP38 (44.60.44.1, changes to my ISP-assigned Gateway Public IP, and forwarded to the BGBed 44 IP), kudos to Marius who also configured this in ampr-ripd (let me know when 1.16.4 is online. I can then remove the default route, if I choose, and reach AMPRGW on tunl0. - in the archives, I noted the firewall forward rule that permits this (as on LEDE/OpenWRT, this is a different firewall zone, on a zone-based firewall - and doesn't work with the iptables configs in the Wiki) - I'll work on documenting and editing
- KB3VWG