I suggest not putting the vpn clients on the same subnet as the one you are trying to connect to. I have never seen this work correctly because the neither side really knows where the packet should be sent.
IPSec VPNs are not bridges. They are routed based on the source and destination.
Give the VPN clients a completely different subnet- 172.16.10.x or something like that.