Tried a test using a Balance 210 in place of the SOHO (210B). Settings are both the same.
All devices on the LAN of the 210B have internet access now and can access devices on the LAN of 210A. Still cannot get to any device going from the LAN of 210A to 210B.