[SOLVED?]need help for openvpn with NAT ( Port Forward, 1:1 and AON)

[takilar]

my config with Pfsense 1.2.3-RELEASE :

Web
                      |
                  Router
                |           | 16 IP = 80.xx.xx.1 - 80.xx.xx.4 ( sample )
                |           |
                ||
                      | 192.168.0.254
                      |
                | 192.168.0.1 ( Virtual IP )
192.168.0.2 |            |  192.168.0.3  
            Pfsense   Pfsense
         |           | |           |NAT ( Port Forward, 1:1 and AON)
         | Main    | | Backup |OPENVPN
         |           | |           |
         || ||
   10.0.0.2 |              | 10.0.0.3
               |__|
                      | 10.0.0.1 ( virtual IP )
                      |
                    Lan

NAT rule :
 80.xx.xx.1:5001 <=> 10.0.3.1:5000              
 80.xx.xx.1:5002 <=> 10.0.3.2:5000
 80.xx.xx.1:5003 <=> 10.0.3.3:5000

80.xx.xx.2 <=> 10.xx.xx.2
 80.xx.xx.3 <=> 10.xx.xx.3
 80.xx.xx.4 <=> 10.0.2.XX ( 80.xx.xx.4 is output for all 10.0.2.x workstation )

if i put an openvpn client between router and pfsense i can be connected to 192.168.0.1
 if i try to connect to openvpn by web and i try to connect to 80.xx.xx.x , i can see packet arrive in pfsense but nothing more…
 i tryed many thing like create openvpn interface etc.... nothing work.

Could you help me

[takilar]

I was not sure my question was very clear, so I try to reformulate it :

If my OpenVpn client is on the 192.168.0.* network, for example 192.168.0.50, I can connect to my OpenVpn server by using the 192.168.0.2 address.
When my OpenVpn client is on the Internet (for example 111.222.xx.xx), obviously I cannot use the 192.168.0.2 address because it belongs to a private network. So I choose one of my 80.x.x.x addresses, for example 80.xx.xx.3 which is nated to 10.xx.xx.3, but then the connecion fails.

Which address should I use ? 
Can I use any address in my range (84.xx.xx.1-84.xx.xx.4) ?
Do I have to reserve an address for OpenVpn Server ? How ?
Do I have to add a special configuration (adding an interface for example) ?

Thanks in advance

[takilar]

Hi,

I found a solution to correct my problem but it is a bit strange !

To connect to OpenVpn using the address 80.xx.xx.3, I have added a port forward NAT:
80.xx.xx.3:1194 -> 127.0.0.1:1194

What do you think about this solution ?
Could security problems happen ?

Thx