@Birillo Remote gateway is your public wan ip on remote site. if i guess you have a home router that you want to connect to work router. so in your home network you probably have a router fom network...

@Birillo it's the same as I got before i understand that Tp-Link have change firmware update port, so go to NAT and create a port forward to your controller. default port on software controller is...

@Birillo No problem, but you have to use Local ID Type and Remote ID Type in IPsec configuration. e.g. Local ID Type=Site-A and Remote ID Type=Site-B and opposit in the other site. You can also use...

@John1234 You can create rules from LAN to WAN but not from WAN to LAN, but anyway such rules will not work when the remote site has dynamic IP. What's the point of making a NAT rule that allow all...

@Birillo This is usaly not a problem, the ony thing you have to do is open managemnet/firmware update port to your controller deafult is on software controller TCP 8043 and TCP 443 on hardware...

@John1234 yes I changed the port and disabled NAT rule, (but then firmware update also use the new port) I open NAT only when I need to do firmware updates on the remote site. but for coves little...