LAN Subnet Access started to work for me only with configuration attached in file + command:
iptables -A zone_vpn_forward -j zone_vpn_src_ACCEPT
When "Clients Use VPN For" is set "Only trafic destined for hosts behind VPN" it doesn't work. Why?
http://postimg.org/image/hlsoe7he9/