If you ever need to do this, Windows devices won’t connect! Add the following to the register and they will.
1. HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\PolicyAgent\
2. New DWORD (32-bit)
3. Value:AssumeUDPEncapsulationContextOnSendRule
4. Set the value to 2