I set up a site-to-site VPN between two TP-Link routers, following the instructions here: https://www.tp-link.com/ae/faq-380.html . The VPN is based on IPSec. Now both routers say that the IPSec security association has been established, but I still cannot send traffic from one net to the other.
My configuration is as follows:
Router A: IP 192.168.1.8 Subnet 255.255.255.0 Router B: IP 192.168.2.8 Subnet 255.255.255.0
I would like to be able to access a computer in one subnet from the other. Do I have to set up NAT, or static routes? Or do I have to enlarge the subnet mask so that the nets overlap? From the instructions I had the impression that they can be disjoint.
Since the association worked, am I right to assume that the problem must be in the internal routing, and not on the WAN side (e.g. a closed port, or an intermediate router I don't know about)?