VPN remote access from LAN TO remote user

Update:

For some reason you need to have a brain to work with XGs. From the log I had the thought that the 10.81.234.5 was the ip I was getting, but it was the gateway. With proper firewall rules VPN-LAN->VPN-LAN and actually finding out my vpn ip, I can acces the remote computer! yay

Ok so the second and equally important question is how can a remote computer get a specific vpn ip, eg. 10.81.234.40

Update:

For some reason you need to have a brain to work with XGs. From the log I had the thought that the 10.81.234.5 was the ip I was getting, but it was the gateway. With proper firewall rules VPN-LAN->VPN-LAN and actually finding out my vpn ip, I can acces the remote computer! yay

Ok so the second and equally important question is how can a remote computer get a specific vpn ip, eg. 10.81.234.40

You cannot bind/assign a specific ip to a client via SSL VPN.

This is currently a suggestion on our Sophos Ideas page.

But: 

All clients logged in via SSL VPN are listed in Live user. So basically you can work for VPN to LAN/DMZ with the user itself as a user based policy. 

I can do that, the problem is that the user policy is always on the From interface. So basically I can assign a rule for the remote user to access a network, but I can't make a network access the remote user.

The policy is From ->interface-network-user To ->interface-network

Actually where I am now, there's no point to route the network to access the user since I don't know the users' address(it's dynamic)

Seems Red is the only solution, even for 1 pc

New problem:

I thought the network could access me(the remote computer). It did, on MacOS.

Today I'm looking at it from a Windows PC, same setup, cannot ping the remote user. I'm thinking that on windows it creates a second adapter and something's not right. Any ideas?

Just in case anyone cares, it was a windows firewall issue.

So in remote SSLVPN from a pc the network works both ways, the only problem is you need to know its VPN IP everytime since you cannot configure a static one.

To be honest - Most of the time, Remote access is designed to access some facilities, not to access the client, who connected to you.

But you will find the IP quickly in Live users. 

Also important to know: every live user uses 4 IP addresses in your SSL VPN Range. 

https://community.openvpn.net/openvpn/wiki/273-qifconfig-poolq-option-use-a-30-subnet-4-private-ip-addresses-per-client-when-used-in-tun-mode?