OpenVPN client can only reach router

[Fright]

@jmcgee
can you try to uncheck "redirect gateway" and (input will appear after this) add LAN net address to "IPv4 Local Network"?

[Fright]

@Gauss23

Looks like your crypto settings don’t match between client and server. How did you create the client config?

TLS Error: cannot locate HMAC in incoming packet from [AF_INET]185.200.118.84:46424

imho that's not real client IP. port scan from 185.200.118 / 24 net. im also view activity from this subnet twice a day

@jmcgee
imho its better to remove private info from logs

[chemlud]

...never use the standard port for openVPN...

[Gauss23]

...never use the standard port for openVPN...

Or at least use tls-auth/tls-crypt

[jmcgee]

@jmcgee
can you try to uncheck "redirect gateway" and (input will appear after this) add LAN net address to "IPv4 Local Network"?

I did. No change.

[Gauss23]

Do you see packets flowing? Enable logging on the firewall rules in OpenVPN group.

[jmcgee]

Do you see packets flowing? Enable logging on the firewall rules in OpenVPN group.

I have enabled firewall logging on OpenVPN firewall rule.  How do I filter those in log?

[Gauss23]

Firewall: Log Files: Live View

[Fright]

and theoretically connected it to all the devices on the router inside the LAN

sorry, can you describe your lan? any other router besides the OPN?

still think that the issue is on the LAN side (routes, port blocking or some) if you not touched default\wizard pf-rules.
can you make Packet Capture on LAN interface while trying SSH from vpn-client to  (working) LAN host ?

[jmcgee]

and theoretically connected it to all the devices on the router inside the LAN

sorry, can you describe your lan? any other router besides the OPN?

still think that the issue is on the LAN side (routes, port blocking or some) if you not touched default\wizard pf-rules.
can you make Packet Capture on LAN interface while trying SSH from vpn-client to  (working) LAN host ?

I don't think I can do packet capture. 
There is no other router, just a network switch.

Would the TUN/TAP issue be the cause? 
https://openvpn.net/faq/why-does-the-app-not-support-tap-style-tunnels/

I had this working on Freshtomato router after putting in appropriate firewall rules.  Don't recall what those were.

[Greelan]

You can packet capture under Interfaces > Diagnostics

[Fright]

Would the TUN/TAP issue be the cause

dont thinks so. and you are in tun mode as far as I can see
as @Greenlan said you can try to capture in  Interfaces > Diagnostics