VPN Server in a LAN machine: not seeing other devices

[ignasi]

Hello and thanks in advance for your help.

We just switched to OPNsense from shorewall. Up until now we've had 2 VPN servers running: OpenVPN and ocserv. OpenVPN is used for connection between our offices and has been already integrated into OPNsense and everything's running without problems (site-to-site works and LANs can see each other). OTOH, ocserv is heavily customized for a particular set of devices (pi units acting as gateways) that we install in our customers offices, so integrating it in OPNsense is going to be a difficult task. In the meantime, I want to keep our current ocserv instance until I figure out how to do it through OPNsense. Connections can be established from the outside, but access to LAN machines do not work, and from LAN to devices behind the client do not work either (settings routes in shorewall worked perfectly, but I don't have that much experience with OPNsense). This is a schematic of that we have:

Each Customer's Offices (openconnect)         Our Main Office
-------------------------------------         ---------------
Computers-|                                                     |- (1) ocserv
          |- OC Gateway-------- INTERNET -- OPNsense -------LAN-|  192.168.40.2
Printers--|  LAN: 10.0.[0-254].0/24         192.168.40.254      |  VPN tun:
          |  IP VPN tunnel: dyn             ocserv PortF to (1) |  192.168.43.0/24
          |                                                     |
Other ----|  192.168.43.x                   WAN: 10.0.0.1/24    |- (n) Devices LAN
                                                                |  192.168.40.0/24

Branch Offices
--------------                   
OpenVPN tunnels are in 192.168.42.0/24. LANs for the Office branches
are 192.168.60.0/24 and 192.168.80.0/24

I need openconnect clients access all devices in LAN and OpenVPN and viceversa. Can anybody assist me with the set of rules I have to add?

Thanks so much for your help

Ignacio