@tantonj client to server is a one-way communication that is triggered by the client, that's just the way it is. I don't know if you can use windows server in the same way as two tp-link routers. it...

@tantonj ok, understand a bit more now :-) i.e. you cannot route traffic from a VPN Server to a client. so you can just forget about it.. there are occasional exceptions, it is the tp-link omada...

@tantonj but I'm not quite sure if I understand your setup. if you have a working VPN tunnel, it is not necessary to do anything more if you only want to have access to a camera on a remote site....

@Blt76 As far as I know, only EAP245 and EAP265 can mesh in stand alone mode, so yes, with EAP225-Outdoor you must have a controller.

@tantonj you cannot use port forward to route through the VPN, you must use policy route, which you can find here. settings, transmition, routing and policy routing

@mia7979 thats correct, we need to use IP groups and IP port groups in the LAN->LAN ACL rules. LAN->WAN is for LAN to WAN ACL. I hope this is a bug and that it will be fixed soon.