Paul:I am acquainted with nmcli. What I have to track down is where a 2nd vpn tunnel is coming from. It's not visible in the cable/modem/router end, and it was only caught by using wireshark in raw mode.
I actually automated setting up the openvpn connections working from presupplied ones from a certain email company by cli scripts.
Sorry, I should have pointed this out in the question for Google's Bard. Randall