I’ve previously had an issue with clients not being able to connect and ARP address mismatch showing in the logs.This happens when the source mac address doesn’t match ARP senders mac address. This was resolved by accessing the Draytek via telnet and executing.

ip arp accept 1

Which will return

Accept illegal ARP source mac REPLY packets