IPsec vpn routed site-to-site doesn't allow traffic outside opnsense

[defaultuserfoo]

Hi,

I have two IPsec connections to Ubiquity EdgeRouters to an OPNsense router, and it is not possible to ping remote devices through the VPN from devices on the LAN at the OPNsense side.  It is possible to ping remote devices from the OPNsense router itself, so the connection is definitely up, only the traffic doesn't make it beyond the router.  RDP connections to remote devices aren't possible, either.

I can see outgoing icmp packets being sent to the remote device from the LAN in the firewall log and don't see responses despite the ping is successful.

I have another connection to one of these EdgeRouters from another OPNsense router at a different location which works fine.  The VPN setups on the two OPNsense routers are basically the same.

What could be the problem; how can I reach the remote devices?

[defaultuserfoo]

I had to add a route to the remote network on one of the EdgeRouters after I made a packet capture on OPNsense and found that no responses were coming back.  Something must be buggy somewhere ...

PS:

The other EdgeRouter had also the route missing.  Has there been some change in OPNsense 22.1.8_1 that might prevent the remote endpoint from creating a route to the networks on the OPNsense site?