Static route to VPN server

You can also test this:

# Disable dropping invalid packets
uci set firewall.@defaults[0].drop_invalid="0"
uci commit firewall
service firewall restart

# Enable masquerading and MTU fix for LAN zone
uci set firewall.@zone[0].masq="1"
uci set firewall.@zone[0].mtu_fix="1"
uci commit firewall
service firewall restart

# Disable sending ICMP redirects
cat << EOF >> /etc/sysctl.conf
net.ipv4.conf.all.send_redirects=0
net.ipv4.conf.default.send_redirects=0
EOF
service sysctl restart
service network restart