I can right now reach from my OPEN VPN CLIENT ( iPhone 6 ) all the way past my OPEN VPN SERVER ( pFsense FW ) to my outside facing interface on my LAN ROUTER but not to the LAN BASED SUBNET it is HOSTING and running DHCP for.
Short version.
1.0.11.6 can ping to 1.0.10.12 but not to any address from the 1.2.3.0/24 subnet which is being leased from the R7000 RT.
[ Goal for the Tunnel to access the IP camera securely and view the feed via phone over cell network ]
See below diagram.
Client CFG:
persist-tun
persist-key
cipher AES-256-CBC
auth SHA1
tls-client
client
remote xx.xx.xx.xx xxxxx udp
lport 0
verify-x509-name "VPN Svr Crt" name
auth-user-pass
ns-cert-type server
<ca>
-----BEGIN CERTIFICATE-----
blah
-----END PRIVATE KEY-----
</key>
<tls-auth>
#
# 2048 bit OpenVPN static key
#
-----BEGIN OpenVPN Static key V1-----
blah
-----END OpenVPN Static key V1-----
</tls-auth>
key-direction 1