Ether2 to SSTP-out1 can't seem to see it.

Quick synopsys

Ether1: ISP dynamic ip
Ether2: 10.1.1.1/24
SSTP-out2: 192.168.30.11

From ether2, I can’t ping 192.168.30.11
I can’t ping 192.168.30.1 (the vpn server)
I can’t ping 192.168.30.2 (the machine I want to get to)

Traceroute from ether2 to 192.168.30.1
10.1.1.1
*
*

From the machine (192.168.30.2)
I can ping 192.168.30.1
I can ping 192.168.30.11


What am I missing?

Not sure if this is out of place: SSTP-out1 (Status) shows Remote Address: 1.0.0.1. Is this okay?

Let’s start with:

/export hide-sensitive