@Birillo it was good you made it work. here is an overview of all the ports that are needed. https://www.tp-link.com/no/support/faq/3281/

@Birillo Remote gateway is your public wan ip on remote site. if i guess you have a home router that you want to connect to work router. so in your home network you probably have a router fom network...

@Birillo it's the same as I got before i understand that Tp-Link have change firmware update port, so go to NAT and create a port forward to your controller. default port on software controller is...

@Birillo No problem, but you have to use Local ID Type and Remote ID Type in IPsec configuration. e.g. Local ID Type=Site-A and Remote ID Type=Site-B and opposit in the other site. You can also use...

@John1234 You can create rules from LAN to WAN but not from WAN to LAN, but anyway such rules will not work when the remote site has dynamic IP. What's the point of making a NAT rule that allow all...

@Birillo This is usaly not a problem, the ony thing you have to do is open managemnet/firmware update port to your controller deafult is on software controller TCP 8043 and TCP 443 on hardware...