@JarekPrzybyl With CGNAT i don't thin the VPN will work. From my point of view, your "public" IP is still private - or more like behind the NAT. If that's behind the NAT, then you need to forward...

@JarekPrzybyl As far as I know you need a public IP assigned to your device (router). So if the public IP is used somewhere else and you just get private IP then no - it won't work with VPN server....

@dadziuk As I understood the remote sites are connecting to the controller (site A) via Internet (not VPN tunnel). Do you have port forwarding from WAN to controller set up properly on site A?...

@vahur Hi, As was said above. Controller is not needed, routers works good in Stand Alone mode. However, I do personally like to have controller connected to those devices. It make it easier to...

@JarekPrzybyl Hi, First of all edit your OVPN config file - delete "no" after "comp-lzo". Another thing is, if you have Dynamic WAN IP, you could thing about setting up DynDNS service on Duckdns or...

@jprobins 1. What subnet (LAN addresses) are propagated by your Netgear? 2. What subnet (LAN addresses) are propagated by TP-Link?