Figured out the problem with the kernel: they reversed the name order of the physical ports, so lan1 was now wan. Moved the cable, everything worked. VPN software didn't, tho, so I'll fight with that later.