How to set up Internet access for several offices connected by VPN (IPsec) through an Openvpn server, authorization of mobile users using LDAP?

Question

openvpn

Hello, it is necessary to configure the access of users to the Internet through an openvpn server. There are several offices combined VPN (ipsec site-to-site). In two pfsense offices, in the rest, routers from mikrotik. There is also an openvpn server hosted on one of the vps hostings.
1) I would like to configure it so that users from the local network go to certain addresses via openvpn. If possible, do without vpn clients on each machine in the local network.
2) Mobile users of the organization (laptops, phones) connect to openvpn and log in via ldap.
Actually, we need not so much help in setting up, but what tools and solutions to use in this case.

Answer 1

1) Solved by configuring routing
2) Softether with RADIUS authorization via LDAP backend