Issue Description

Branch A and Branch B are unable to communicate via HQ with Sangfor VPN. Although Tunnel Route has been created to route the traffic to Branch A, but still does not work. Topology as below,

Handling Process

Tunnel Route does not work in this scenario, because MPLS is considered LAN connection from HQ.

Solution

Add the Branch A IP segment into HQ device VPN Local Subnet