Help needed understanding static routes on the Opal

You're 'double NAT'd' when running the Opal as a router/repeater. Typically you'd have to open whatever ports you need to forward/redirect on whatever side of the subnets if you want to keep the Opal's VPN.