Hi! We have bought this router, configure the VPN site-to-site using IPSEC. Attaching network cards directly to router network ports everything works perfectly: I can reach (ping and trace) the target network.

I follow the guide https://www.tp-link.com/us/support/faq/3363/  and our network topology is exactly the same.

Local client can reach server 10.10.1.200 over VPN Tunnel, but VPN Client can't.

I can ping the server using "Diagnostics" from router, using interface WAN.

PING 10.10.1.200 (10.10.1.200): 64 data bytes
Reply from 10.10.1.200:  bytes=64  ttl=62  seq=1  time=119.197 ms
Reply from 10.10.1.200:  bytes=64  ttl=62  seq=2  time=118.890 ms
Reply from 10.10.1.200:  bytes=64  ttl=62  seq=3  time=119.012 ms
Reply from 10.10.1.200:  bytes=64  ttl=62  seq=4  time=118.935 ms

--- Ping Statistic "10.10.1.200" ---
Packets: Sent=4, Received=4, Lost=0 (0.00% loss)
Round-trip min/avg/max = 118.890/119.008/119.197 ms

But using VPN Client...

   Connection-specific DNS Suffix  . :
   IPv4 Address. . . . . . . . . . . : 10.101.0.1
   Subnet Mask . . . . . . . . . . . : 255.255.255.255
   Default Gateway . . . . . . . . . : 0.0.0.0

Using tracert:

C:\Users\VToni>tracert -d 10.10.1.200

Tracing route to 10.10.1.200 over a maximum of 30 hops

  1     5 ms     3 ms     5 ms  10.0.0.230
  2     6 ms     3 ms     3 ms  PUBLIC IP
  3    20 ms     7 ms     5 ms  ISP INTERNAL 1
  4     5 ms     7 ms     5 ms  ISP INTERNAL 2
  5     7 ms     6 ms    11 ms  ISP INTERNAL 3

10.0.0.230 is the internal network ip associated with VPN L2TP Client.

After this IP it must be reach 10.10.1.200, not public ip...

Any idea what could be happening?

Thanks!