@PeterHor 

Hey,

Controller can not do this currently. You will need to create two IPSec policies. One from site A to site B, the other from the VPN IP of PC to site B. But on controller, you can only select LAN network, not VPN network. If you manage the router in standalone, you can enter the VPN IP of PC as local network.

As you mentioned there is no public IP on site B so that you can't configure PPTP, can you do port forwarding configuration for ER605 on its upstream router with public IP? If yes, things will be much easier:)

@Somnus 

Unfortunately the upstream router is an Italian internet provider not giving an public IP, which is the root of the problem.

So port forwarding on the this router is not in mine control.

Are you telling this could be solved by placing both routers in stand alone mode?

Which is very disappointing and lack of functionality of Omada cloud isn't it?

Peter

@PeterHor 

Yes. In standalone mode, you can enter the local subnet manually, so that you can specify the local subnet as the VPN IP of the PC.

@Somnus 

Thanks for the answers.