NAT internal IP

[c-mu]

Hi,
I want to enable OpenVPN from my Wifi VLAN, but without changing the client config. All my VPN Clinets have the external IP of my Server in their conifg.

Like: 80.72.100.100:443 (fantasy IP)

The OpenVPN Sevice ist listening on 10.27.30.35:1194.

From Outside, I do the following Forward NATing:
Interface: outside
Proto: TCP
Source: *
Destination: my Pub IP
Dest Port: 443
NAT IP: 10.27.30.35
NAT Port: 1194

That works finde.

Now I want the same for my Wifi, but I didint get it:

Interface: Wifi
Proto: TCP
Source: *
Destination: my Pub IP
Dest Port: 443
NAT IP: 10.27.30.35
NAT Port: 1194

Should'nt that work too? Do I miss something?
If i change my config to the internal IP and Port, then I can connect.
Thank You

[c-mu]

found the solution: as simple as that: dont use outbound nat for Wifi, instead use the same port forward rule from outside, and add the wifi interface there