TAP is a solution, but I expose my intranet if I go about it this way. also, its far harder to switch to another subnet should subnet colisions occur....
why are exposing your intranet? because you're using your internal DHCP server?
so i would like to use tun interface with the same ease that I use openvpn now, but perhaps relay the dhcp packets to the intranet dhcp server, as it is easy to assign different zones there...)
fundamentally not possible: in a tun style network no MAC addresses are sent to the OpenVPN server, hence you don't have a MAC address to assign a DHCP address for; if you want to use an external DHCP server then you MUST use TAP. If you want to control the assignment of IP addresses in a TUN style setup then you can use a 'client-connect' script.
