Hello all,

I am currently working on an OpenVPN server which is hanging in a Mikrotik network. This is implemented using PRITUNL on a VM in a server VLAN.
So far everything works. The problem is that I want the clients to report with their assigned IP and not hide behind the VM using NAT. With NAT I can access all devices.
I have also managed so far that the VPN IP is used.
However, without NAT I can not get to individual devices in other VLANs, although a rule is enabled for all areas.

However, I can only access parts of the network via VPN when I create a RAW rule "no track". (I think here is also somewhere the problem)

But now I want for example a VPN server that can access all network areas, one that can only access specific devices and ports. (All due to the IP range)
What am I perhaps overlooking in my configuration?

Appropriate routes are set up and so are the rules.
I'm sure it's a small thing, but I didn't know what to look for.

Thanks for your help!