IPsec IKEv2 Mobile Clients - access from client to other client LAN

[IPSecMan]

Hi,

PfSense is the "Server" for remote clients (IKEv2 with Mobile Clients Support and eap-mschapv2 auth).

As Local Subnet in P2 I give the PfSense LAN network. As a client, Mikrotik has no problem accessing the PfSense LAN.

However, I would like to get something else - connect to Windows (Client2) and access Mikrotik LAN (Client1) from it.

Is it possible? There is no Remote Subnet field in P2 on PfSense. If on Mikrotik in P2 I set the Mikrotik LAN network (as Scr Addresses in the Policies tab) in the PfSense logs error:

traffic selectors LAN Address === LAN Address unacceptable.

Thanks in advance for your help, I will include a small diagram of architecture.