Use VM as a VPN Gateway

Hello,

couldn’t find an option on my old unifi USG to connect to a L2TP VPN server therefore I’m trying to use a VM as a VPN Gateway.

I have a debian 12 VM that is via VPN connected to the other network.
The IP of this VM is 192.168.110.107 and from this VM I can ping 192.168.2.170.
net.ipv4.ip_forward=1 is set and the hypervisor’s firewall is disabled.

The output of “ip route” is:
default dev ppp0 scope link
default via 192.168.110.1 dev ens18 onlink
11.22.33.44 via 192.168.110.1 dev ens18
172.16.100.11 dev ppp0 proto kernel scope link src 172.16.100.254
192.168.110.0/24 dev ens18 proto kernel scope link src 192.168.110.107

Then I have a static route on my USG-3P router.
Distance: 1
Destination Network: 192.168.2.0/24
Type: Next Hop
Next Hop: 192.168.110.107

If I ping 192.168.2.170 from another PC on my local network, I get this:
PING 192.168.2.170 (192.168.2.170) 56(84) bytes of data.
From 192.168.110.1 icmp_seq=2 Redirect Host(New nexthop: 192.168.110.107)

I also tried to set the PS’s gateway to 192.168.110.107.
Pinging 192.168.2.170 in this case has no response.

What did I miss?