site to site VPN on TP-link --- PALO ALTO ---- AWS

[SamuelCardoz]

As of now STORE router/POS1 able to reach the head office(PALO ALTO) via site to site VPN and HeadOffice(PAN) to AWS also working via site to site VPN. But our main goal is that POS1/Store able to reach the AWS network. As of the momment POS1 not able to reach the AWS networks. I already tried to add a route on the PAN from Store network going to AWS tunnel but still not working.
Any idea on how i can make it working.  Is there any one from the community have this kind of setup. 

Thanks

[SutareMayur]

Hi @SamuelCardoz ,

In order to achieve your goal, you need to do all the required configuration at both Palo Alto as well as AWS end to allow communication between

STORE router/POS1 and AWS. Only adding route at Palo Alto end won't help. You can verify traffic logs on palo alto side to see what's going on and decide further actions.

I will recommend you to verify below configurations-

Security Policy 

NAT if any

Encryption domains at both sides

Routes at both sides.