Нужна помощь по VPN

Вообщем вот:
конфиг клиента

dev tun
proto udp
remote 78.XXX.XXX.XXX 3000
client
resolv-retry infinite
ca /usr/local/etc/openvpn/keys/ca.crt
cert /usr/local/etc/openvpn/keys/client.crt
key /usr/local/etc/openvpn/keys/client.key
tls-client
tls-auth /usr/local/etc/openvpn/keys/ta.key 1
auth MD5
cipher BF-CBC
ns-cert-type server
comp-lzo
persist-key
persist-tun
verb 4
log /var/log/openvpn/openvpn.log
status /var/log/openvpn/status.log

конфиг сервера

port 3000
proto udp
dev tun0
ca /usr/local/etc/openvpn/keys/ca.crt
cert /usr/local/etc/openvpn/keys/server.crt
key /usr/local/etc/openvpn/keys/server.key
dh /usr/local/etc/openvpn/keys/dh1024.pem
mode server
ifconfig 192.168.100.1 192.168.100.2
ifconfig-pool 192.168.100.4 192.168.100.251
route 192.168.100.0 255.255.255.0 192.168.100.1
route 192.168.3.0 255.255.255.0 192.168.100.1
push "route 192.168.100.0 255.255.255.0"
push "route 10.0.0.0 255.0.0.0"
tls-server
tls-auth keys/ta.key 0
tls-timeout 120
auth MD5
cipher BF-CBC
# keepalive 10 120
comp-lzo
max-clients 100
user nobody
group nobody
persist-key
persist-tun
status /var/log/openvpn/openvpn-status.log
log /var/log/openvpn/openvpn.log
verb 3

192.168.100.0 виртуальная сеть
192.168.3.0 сеть филиала
10.0.0.0 офисная сеть

косяк следующий... с сервера 192.168.3.1 пинг идет на 10.0.0.0 а с 10.0.0.0 пинг на 192.168.3.0 не проходит...

Вопрос - где грабли?