What network component to commission for a VPN access with BC100 controlers, and PFC200 controlers ? ?

As both PFC200 and a Modem router , are possible to commission on the same network for a remote (VPN access) and local acces firewall ,which one (PFC200 or/and Modem router) do we have to commision or both ?

As BC100 is not possible to commission (VPN and firewall ) for a remote VPN access , how to do commision the modem router with wireguard for example ?

What are the differents settings to commission ?

In your case (Multiple PLC behind a router), I would recommend to have the VPN directly on the router with everything else closed.
Like if you are creating a network between 2 offices.
Also I would recommend to ditch the port 80 and HTTP and use port 443 and HTTPs