I have 2 TP-Link ER605 and ER706W-4G routers with subnets 192.168.0.0/24 and 192.168.10.0/24 configured with an IPsec VPN. Each router is behind an ISP modem, and since the WAN IP of the ER605 is not public, I am using the public IP on the modem and configuring DMZ to forward to the WAN IP of the ER605. The VPN shows as connected, but I cannot ping between the two networks in either direction. What could be the problem? When I use the built-in Diagnostics on the ER605, I can successfully ping the remote router's LAN IP, but the PCs behind them cannot ping each other. It seems the routers can talk to each other, but they aren't routing/forwarding traffic from the LAN clients into the tunnel.