I have some units with both pepvpn and ipsecvpn connections. when doing diagnostics using ping and traceroute tou can specify WAN, LAN, CELLULAR and any pepVPN connection, but cannot specify an ipsecvpn.
Also - it would be useful to have “default” setting, meaning "route according to route table.
One additional tool would be helpful: “display routing for IP”. You enter an ip address and it would display where it thinks it is and why.
you enter 10.20.30.5 and it displays
Following route 10.20.30.0/27 on PEPVPN "Data Center1"
or Following default route
This can be very useful in determining where the router thinks a given network can be found.