@dakorres there is almost 100% firewall issue, double check that TCP 29814 is open. you can use telnet from remote network to test, run cmd in windows or other telnet application, mybe you ned to add...

@Josh38 yes your sketch will work perfectly fine. with tp-link router you can use name and dynamic ip on every site.

@ZdenekM There is no need of static route so this can you remove? I think you have to look at firewall rule on server running controller. add a rule that give 192.168.3.0/24 access to server. /shberge

@Daniel-nio If there is a firewall between controller and access point you ned to open TCP 29814 1-30-2022 09:04:08.272 WARN [netty-tcp-server-worker-15-3] [] c.t.s.e.t.n.ChannelLoggingHandler(47):...

@Pascal You can use url in discovery tool. and you have to open TCP 29814 if you use Omada SDN 5.0.30 to adopt to a remote controller. but url in option 138 have ben nice and easy.

@ScotC TP-link dont support multiple subnet on IKEv1 so yes, you have to create a vpn connection profile to every subnet.