Enable hybrid mode and make NAT rules for LAN → VPN and Localhost → VPN.
Firewall rules can be similarly added: