draharz As a first step I have deactivated the protect surf, because this is another protection layer, which then results in a double NAT with your own router.
Can you please test it again and get back to me. It is important that you use LAN 4 from Sunrise Modem. Only this has 2.5 Gbit connected.
Greetings
Daniele