How to configure routing between Kerio and VPN tunnel configured between TP-Link?

Question

VPN

Good afternoon. A VPN is configured between two offices between TP-Link ER6120 and TP-Link TL-R600VPN. On the TP-Link TL-R600VPN, the white IP network behind it is 192.168.1.0/24. Does the TP-Link ER6120 also have a white IP network behind it 192.168.2.0/24? behind it is Kerio has the address 192.168.2.5/24 behind Kerio the address is 192.168.0.0/24. So clients 192.168.0.0/24 have access to the network 192.168.1.0/24. And how to configure access and routing of the network 192.168.1.0/24 to the network 192.168.0.0/24 does not work.
In Kerio, I set up a group of addresses 192.168.1.0/24 and in the firewall rules I set up a rule for the group of addresses to allow all traffic, then the external IP Kerio 192.168.2.5/24 from the network 192.168.1.0/24 pings, but then no. On the client from the network 192.168.1.0/24 added the network route 192.168.0.1/24 through the gateway 192.168.2.5.

Answer 1

Better late than never, maybe my answer will be useful to someone.
1) On the er6120 piece of iron, you need to configure the DMZ port by setting it with an ip from the 192.168.0.0/24 subnet, for example 192.168.0.100, and connect it with a patchcord to the 192.168.0.0/24 network
2) After that, reconfigure the tunnels between r600 and er6120, specifying as local network subnets - 192.168.1.0/24, and 192.168.0.0/24 - (on er6120 this subnet will become available since the dmz port is configured)
3) On Kerio, make a stat route route add -p 192.168. -ip address of the dmz port on er6120
PS
I have exactly the same scheme, only instead of r600 - mikrotik, and instead of kerio -traffic inspector. At one time I thought for a long time how to make it all work, by the way it works like clockwork to this day.))