sircles wrote: So is this an IOS or OSX client? Did you tick the box for 'send all traffic through connection' or similar?
Is the other subnet listed in the DrayTek VPN LAN as a secondary subnet so that the device knows to route to it internally?

1. Both
2. Yes
3. Yes

SOLVED

It turns out I had an interface ('bridge0') that had grabbed hold of the 192.168.2.1 IP. I disabled internet sharing which wasn't actually intended to be used in this case (it was just on) and the problem went away.

I'd like to get Bonjour/mDNS working between the hosts in the 192.168.2.x LAN and the 192.168.1.x VPN dial-in clients; it is working for LAN to LAN, but thats perhaps another post.

Thanks for your previous help
Wayne