@SomeNetEngineer 

what you want is not possible with IPsec site to site.
That's probably why it's called site to site ;-)

  @MR.S "Site-to-Site" just means that it's connecting two sites, not a client to a site. It has nothing to do with how traffic is routed. There are plenty of corporate Site-to-Site VPNs that run all traffic from a remote site through the headquarters site.

What I'm confused about is why I can't get it to work with routing rules. I should be able to create a static route directing all traffic through the VPN, but it just doesn't work. Perhaps I also need a static route on the responder side?

  @SomeNetEngineer 

do you have any examples of who can do what you want with IPsec site to site, I am very interested in that.

you can proxy out on the remote site with L2TP/IPsec but not IPsec site to Site. 

but give me an example of who can proxy out on the remote site with IPsec site to site. 

  @SomeNetEngineer 

Find "full tunnel" on this page. It's a site-to-site IKEv2 (IPSec) full tunnel where all traffic can be directed over it.

  @SomeNetEngineer 

Cisco has probably built in a slightly different technology than standard IPsec site to site in this solution. with Omada and most other solutions this is not possible, But mybe it may come together with SD-WAN which is notified in version 5.15.20 of Omada.