I do have a setup with pfsense. I have configured 2 LAN subnets: 192.168.50.0/24 is a DMZ 192.168.100.0/24 is a Management
Then in DMZ I do have an openvpn server. To that server multiple clients are connecting. I would like to be able to connect to their interfaces from 192.168.100.0/24. I was able to route ping to the vpn server (seen it on tcp dump) by specifing vpn server as gateway for 10.20.0.0/24 on pfsense.
However the ping never reached tun interface (tcp dump only saw it on eth interface and not as outgoing on tun).
I do believe that I must do something with IP tables on openvpn server. Any suggestions on how to achieve rhis without switching to site-site vpn? I know that I can connect as vpn client and allow client-client but this is not prefered way.
According to this https://openvpn.net/vpn-server-resources/reach-openvpn-clients-directly-from-a-private-network/ it should be possible in openvpn access server but how to do this in standard ovpn server.
Thank you in forward