Client VPN access did not work for me in step 5 even after I added authorization rule as described in stage 5 instructions:
$ ping 10.16.96.77
PING 10.16.96.77 (10.16.96.77): 56 data bytes
Request timeout for icmp_seq 0
Request timeout for icmp_seq 1
Request timeout for icmp_seq 2
Request timeout for icmp_seq 3
The following extra steps were necessary to get both icmp ping and http flowing:
-Disconnect VPN client
-Download client config again
-Re-create VPN profile using the new config
-Connect to VPN again
$ ping 10.16.96.77
PING 10.16.96.77 (10.16.96.77): 56 data bytes
64 bytes from 10.16.96.77: icmp_seq=0 ttl=254 time=61.212 ms
64 bytes from 10.16.96.77: icmp_seq=1 ttl=254 time=55.324 ms
64 bytes from 10.16.96.77: icmp_seq=2 ttl=254 time=45.528 ms
Update: The new .ovpn vpn profile file looks identical to the old one. Another possibility is the newly added authorization rule takes a while to propagate (several minutes)