Hi @ITuser2 

Thanks for posting in our business forum.

1. IPsec is not supposed to forward all traffic.

2. Not very sure about what your description "from lan port to wan port" means.

Hi @ITuser2 

Thanks for posting in our business forum.

ITuser2 wrote

  @ITuser2 

 

 

branch office lan ->   lan port -> tp link > wan port (vpn ipsec) -> internet > (vpn ipsec hq) -> hq office 

 

user in branch office can ping lan port tplink

 

vpn ipsec succesfully  connected with both side.

 

 

but from tp link could not forward all internal ip to hq office lan 

Screenshots I require:

IPsec config of your remote subnet setting on the router.

Remote HQ IPsec config as well.

Ping from Branch LAN to HQ (remote subnet's) default gateway IP address.

Hi  @ITuser2 

I understand the privacy but this is not helpful to me at all.

I still don't understand your ping and what's the meaning of it. I asked you to ping the default gateway IP and it's IP is not a public IP which should be no problem to expose. I ask you to use a PC from the branch LAN to ping that and share the screenshots.

Think in my shoes. With the information provided so far, I don't have any suggestions or comments. I recommend you check your parameters and make sure they are correct.

Hi @ITuser2 

ITuser2 wrote

  

hi clive, 

any plan to reply my post?

Sorry for my bad understanding and reading ability I don't understand your question and your picture. I don't have a comment on your described issue and that was the reason why I did not reply. 

Like the first post, the IPsec is not gonna forward all the traffic because it does not support(have) a proxy mode. And if this is not your question, please describe it again.