VPN Routing RT-AX58U

[SteveM]

Hi I'm running firmware 3004_388.4

I'm wanting to connect 2 subnets via an OpenVPN. The Client Router is running OpenWrt 24.10.0, r28427-6df0e3d02a and is connected to a Virgin Router and is acting as a AP

My local LAN/Wireless subnet is 10.200.0.0 255.255.0.0 - The server VPN address is 10.16.0.1
The Client Router WAN subnet is 192.168.0.0 255.255.255.0 as assigned by the Virgin Router - The client VPN address is 10.16.0.2

The ovpn file starts with this:

# Config generated by Asuswrt-Merlin 388.4, requires OpenVPN 2.4.0 or newer.

client
dev tun
proto udp
remote vpn.my.network 1195
resolv-retry infinite
nobind
float
ncp-ciphers AES-256-GCM:AES-128-GCM:AES-256-CBC:AES-128-CBC
keepalive 15 60
auth-user-pass
remote-cert-tls server
pull-filter ignore "redirect-gateway"

The routing table on the Asus:

Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
default         172.16.10.249   0.0.0.0         UG    0      0        0 ppp0
10.8.0.0        *               255.255.255.0   U     0      0        0 tun21
10.16.0.0       *               255.255.255.0   U     0      0        0 tun22
10.200.0.0      *               255.255.0.0     U     0      0        0 br0
X.X.X.X         172.16.10.249   255.255.255.255 UGH   1      0        0 ppp0
X.X.X.X         172.16.10.249   255.255.255.255 UGH   1      0        0 ppp0
127.0.0.0       *               255.0.0.0       U     0      0        0 lo
169.254.0.0     *               255.255.0.0     U     0      0        0 eth4
172.16.10.249   *               255.255.255.255 UH    0      0        0 ppp0
239.0.0.0       *               255.0.0.0       U     0      0        0 br0

The routing table on the OpenWRT router

Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
default         192.168.0.1     0.0.0.0         UG    10     0        0 eth1
10.16.0.0       *               255.255.255.0   U     0      0        0 tun0
10.200.0.0      10.16.0.1       255.255.0.0     UG    500    0        0 tun0
10.201.1.0      *               255.255.255.0   U     0      0        0 br-lan
192.168.0.0     *               255.255.255.0   U     10     0        0 eth1

What I don't seem to be able to do is ping anything on the 192.168.0.0 subnet from the 10.200.0.0 subnet.

I have added 2 static routes to the Asus Route UI for:

10.16.0.0   255.255.255.0 gw 10.16.0.1 via VPN
192.168.0.0 255.255.255.0 gw 10.16.0.2 via VPN

I can ping 10.16.0.2 and SSH to the OpenWRT router from a device on the 10.200.0.0 subnet.

Any suggestions as to what I might be missing?