iptables + openvpn How to prohibit route through VPN for a client so that only it works through the provider?

Question

openvpn

Good day!
How to prohibit route through VPN for a client so that only it works through the provider, and other clients use the final VPN gateway, while the local network is available to everyone?
Without settings on client machines (route prescribing).
Interface: TAP.

Answer 1

1. Add to the OVPN server config:
------------------------------------ -------
client-config-dir /etc/openvpn/ccd
-------------------------------- -----------------
2. For the desired client, add parameters:
/etc/openvpn/ccd/client1
----------------- --------------------------------
# push-reset, forbids giving this client the general parameters assigned by the push command in the server config file
push-reset
# The route we want to send to this client
push route 192.168.100.0 255.255.255.0
-------------------------------- -----------------

Answer 2

How to prevent VPN clients from accessing the Internet, leaving access only from a given ip?