Mqtt and asus mesh router

i have 10 wifi sonoff relay (several are TH with temp meter) with 6.2.1 Tasmota.

hassio is on RPI4 192.168.100.2
router is on 192.168.100.1
sonoff relays 192.168.100.10-20
mqtt broker has default configuration
hassio uses lets encrypt, accessable from outside with domain but not accessable from local network using IP.

Home Assistant 2022.9.7
Supervisor 2022.09.1
Operating System 9.0
Frontend 20220907.2 - latest
Mosquitto broker: 6.1.3

Everything was working fine for 4 years untill i changed networking to asus mesh router (2x ZenWiFi AX XT8)

all sonoff connected to new wireless without issue but did not work normally with mqtt Mosquitto broker.

some relays in console shows:

06:36:57 MQT: Attempting connection...
06:36:57 MQT: Connected
06:36:57 MQT: tele/sonoff-svetaine1/LWT = Online (retained)
06:36:57 MQT: cmnd/sonoff-svetaine1/POWER = 
06:37:28 MQT: Attempting connection...
06:37:28 MQT: Connected
06:37:28 MQT: tele/sonoff-svetaine1/LWT = Online (retained)
06:37:28 MQT: cmnd/sonoff-svetaine1/POWER = 
06:37:44 MQT: Attempting connection...
06:37:44 MQT: Connected
06:37:44 MQT: tele/sonoff-svetaine1/LWT = Online (retained)
06:37:44 MQT: cmnd/sonoff-svetaine1/POWER = 
06:38:00 MQT: Attempting connection...
06:38:00 MQT: Connected
06:38:00 MQT: tele/sonoff-svetaine1/LWT = Online (retained)
06:38:00 MQT: cmnd/sonoff-svetaine1/POWER = 

some:

06:36:38 MQT: Attempting connection...
06:36:53 MQT: Connect failed to 192.168.100.2:1883, rc -4. Retry in 10 sec
06:37:04 MQT: Attempting connection...
06:37:19 MQT: Connect failed to 192.168.100.2:1883, rc -4. Retry in 10 sec
06:37:30 MQT: Attempting connection...
06:37:45 MQT: Connect failed to 192.168.100.2:1883, rc -4. Retry in 10 sec
06:37:56 MQT: Attempting connection...
06:38:11 MQT: Connect failed to 192.168.100.2:1883, rc -4. Retry in 10 sec
06:38:21 MQT: Attempting connection...
06:38:36 MQT: Connect failed to 192.168.100.2:1883, rc -4. Retry in 10 sec

mqtt broker logs:

2022-10-03 08:37:16: New connection from 192.168.100.1:1382 on port 1883.
2022-10-03 08:37:16: Client DVES_874A4B already connected, closing old connection.
2022-10-03 08:37:16: New client connected from 192.168.100.1:1382 as DVES_874A4B (p2, c1, k15, u'mqtt-user').
2022-10-03 08:37:28: New connection from 192.168.100.1:24033 on port 1883.
2022-10-03 08:37:28: Client DVES_AF8F6A already connected, closing old connection.
2022-10-03 08:37:28: New client connected from 192.168.100.1:24033 as DVES_AF8F6A (p2, c1, k15, u'mqtt-user').
2022-10-03 08:37:29: New connection from 192.168.100.17:49893 on port 1883.
2022-10-03 08:37:29: New client connected from 192.168.100.17:49893 as DVES_921921 (p2, c1, k30, u'mqtt-user').
2022-10-03 08:37:29: Client DVES_921921 closed its connection.
2022-10-03 08:37:44: New connection from 192.168.100.1:2342 on port 1883.
2022-10-03 08:37:44: Client DVES_AF8F6A already connected, closing old connection.
2022-10-03 08:37:44: New client connected from 192.168.100.1:2342 as DVES_AF8F6A (p2, c1, k15, u'mqtt-user').
2022-10-03 08:37:47: New connection from 192.168.100.1:18622 on port 1883.
2022-10-03 08:37:47: Client DVES_874A4B already connected, closing old connection.
2022-10-03 08:37:47: New client connected from 192.168.100.1:18622 as DVES_874A4B (p2, c1, k15, u'mqtt-user').
2022-10-03 08:37:55: New connection from 192.168.100.17:49768 on port 1883.
2022-10-03 08:37:55: New client connected from 192.168.100.17:49768 as DVES_921921 (p2, c1, k30, u'mqtt-user').
2022-10-03 08:37:55: Client DVES_921921 closed its connection.
2022-10-03 08:38:00: New connection from 192.168.100.1:23315 on port 1883.
2022-10-03 08:38:00: Client DVES_AF8F6A already connected, closing old connection.
2022-10-03 08:38:00: New client connected from 192.168.100.1:23315 as DVES_AF8F6A (p2, c1, k15, u'mqtt-user').
2022-10-03 08:38:03: New connection from 192.168.100.1:12990 on port 1883.

one interesting info is that i can not see real sonoff ip. in log just visible 192.168.100.1 with random number like port

on asus disabled smart connection and tried many variantions without success. Finally found something. When NAT is disabled, sonoff connects perfect and works like it must but i can not access hassio from internet and must use internal ip address. Enabling NAT can access hassio from internet but mqtt did not work.

now changed some relays to sonoff zigbee but did not like this solution.

maybe someone has solution?