It's quite possible that the Qnap won't accept traffic from any network outside the LAN it's attached to.  The traffic from your OpenVPN connection appears to come from your OpenVPN network address. Have a look at this thread.  Substitute your subnets/addresses into jimp's solution and see if it works. Edit:  I don't know about the Qnap but you may also be able to configure the networks allowed to talk to it, as you can in NAS4Free.

"Source Port Range to 50000 (torrent client port)" Because your client is not using that as its source port..  Source ports are normally some random port above 1024.. your sure your traffic was going to X from the source port 50000, you saw that in the clients connects with a simple netstat on the client.

Just looked at their instructions - not sure what their point of trying to get you to put the key in for the CA.. They don't have a clue ;)  That is the key they are using for the tls auth - its right in their config.. client dev tun proto udp remote vlau-us1-ovpn-udp.pointtoserver.com 53 persist-key persist-tun ca ca.crt tls-auth Wdc.key 1 cipher AES-256-CBC comp-lzo verb 1 mute 20 route-method exe route-delay 2 route 0.0.0.0 0.0.0.0 auth-user-pass auth-retry interact explicit-exit-notify 2 ifconfig-nowarn auth-nocache So clearly its not the CA private key ;)

Hi Sorry for late. In pfsense I did not get public ip at wan interface cause of my ISP. So i can not remote access to my from Internet.

thanks for trying to help gjaltemba !! I am embarrassed to say my son on the other end was the one telling me that he couldn't connect to anything on the remote LAN from the home LAN.  As I was troubleshooting that issue, he mentioned the internet had been acting up for "about the past hour" - this is at the home address running pfSense, and it happens to be on a gigabit connection. After troubleshooting that issue to TWO LAN computers where two other members of the household were each downloading (and I think possibly seeding) a 3.3 GB patch for ARK (and then stopping those) - he could immediately connect to the ASUS LAN cameras web server.  He isn't able to see the video streams, but I can see them on my phone across two VPN connections, so I think it must be 99% working. Knock on wood, I think it might be fixed *

Thank you for posting he solution too /Bingo

Thank you very much for the solution jimp! It is working perfectly now. Best Regards, agrozdanov

Thank you Marvosa!! Took me a while to wrap my brain around your fix but it totally worked! 100%! And I learned a lot about OVPN and routing too. Thank you!!

how has nobody dealt with this issue before? Nobody has nat traversal on and using a vpn?

start by providing info…. "ive tried everything" is fairly useless to start debugging this issue so: diagram of your intended network (include subnets/ip's) screenshots of configuration related to vpn logs

Yeah often when someone suggest changing from default port someone else usually retorts with a speech about security through obscurity being worthless… Security through obscurity vs "true" security is an imperfect analogy to cover vs concealment. Concealment can't physically protect you but it serves a purpose. The most commonly cited purpose is to clean up your log files, and that is certainly a valid purpose.