You need to ensure that users from both forests can establish VPN connections by using their own domain accounts