@RemoteTRX Okay, there should be 4 IP subnets in play. Local LAN, Remote LAN, Tunnel Endpoints and Client IP pool. None of them can be the same subnet. Let's start at your Local site, the Remote LAN...

@test01 That's a bit of a bombshell! Thanks @shberge If you are rebuilding your VPN...I don't see the issue with using the L2TP/IPsec Client-Server approach I suggested. At least it's consistent and...

So are you port forwarding or DMZ'ing? I think the VPN definitions at either end should be done with both public IPs.

@test01 Ok, I believe the issue is that IPSEC site-site only works when both endpoints have a public static IP, and yours don't: Those 192.68.73.0/24 addresses are not publicly routable. Not the end...

Just for clarification, this is the routing table from the 8411?

@test01 I also find this dashboard applet useful, but you have to add it from the available ones list: