Andrews & Arnold offer a L2TP Service for people like me, who are trapped behind a CGNAT system.
The following was sourced from here, here and a bit of experimentation.
Add following:
config interface 'aa'
option ifname 'tun'
option proto 'l2tp'
option server '90.155.53.19'
option username '<USERNAME>'
option password '<PASSWORD>'
option ipv6 'auto'
option metric '50'
config interface 'aa6'
option ifname 'l2tp-aa'
option proto 'dhcpv6'
option reqaddress 'force'
option reqprefix '48'
option peerdns '0'
Update config zone
for wan
:
config zone
option name 'wan'
...
option network 'wan wan6 aa aa6'