I found the reason why the routing was problematic.
My local network is on the network range 10.0.0.0/24.
I've created an account for a coworker, his local network range is 192.168.0.0/24.
He doesn't need to add routes and he can connect to any server on the other side of the tunnel.
The virtual ip pool is set to 192.168.10.0/27. Which can be set VPN -> IPSec -> Mobile Clients -> Virtual Address Pool
I've made a workaround:
created a bash script:
Then created a plist file:
/Library/LaunchDaemons/network.watcher.plist
Then activated the network watcher daemon, that performs actions if network changes are detected.
sudo launchctl load /Library/LaunchDaemons/network.watcher.plistThere is a slight delay for the route propagation of about 10 seconds, but it works for me.