Share br-lan with vpn?

[pavelgl]

We can't see the network configuration because you posted part of the firewall configuration instead of /etc/config/network.

@shinji14

config zone 'vpn'                           
        option name 'vpn'                   
        option input 'ACCEPT'                   
        option forward 'ACCEPT'              
        option output 'ACCEPT'                  
        option masq '1'                
        option mtu_fix '1'                  
        option network 'vpn'                
                                               
config forwarding 'vpn_forwarding_lan_in'       
        option src 'vpn'                        
        option dest 'lan'               
                                     
config forwarding 'vpn_forwarding_lan_out'  
        option src 'lan'                    
        option dest 'vpn'                   

Better remove the zone and forwardings and add the vpn interface (network) to the lan firewall zone.

@shinji14

windows 192.168.29.50

@shinji14

I tried wireshark on 192.168.29.50 and I can see ping packets arriving from 10.8.0.2, but response is lost somewhere.

By default, windows firewall does not accept connections originating outside its own ip subnet. Open the host firewall or enable masquerading on the lan zone to see if this is the case.