@test01 

 

The OSX equivalent of "route print" is "netstat -rnf inet"

  @test01 

 

Can you also provide the controller's Insights->Routing Table info (public IP partially anonymized (ie leave first and last digit visible only))

 

Since it seems your routers are .2 and not the usually .1, can you also change your VPN Remote Subnet definitions to be 172.22.2.2/24 and 172.23.1.2/24 (this is a bit of a hail mary) instead of the .1's?

  @test01 

 

Ok above is good...looks the routing hiccup is in one or both of the routers.  Can you make the Hail Mary changes and then send the Controller's routing table?

  @test01 Just edit your VPN settings to change the .1 to a .2

 

 

Then from the controller, go to Insights->Routing Table, and screen grab that

 

 

  @test01 

 

I also find this dashboard applet useful, but you have to add it from the available ones list:

 

 

Just for clarification, this is the routing table from the 8411?