OpenVPN + клиенты Win2k/XP

Доброго времени суток!
Подскажите как решить такую задачку.
Есть OpenVPN сервер, конфиг:

mode server
tls-server
local XXX.XXX.XXX.XXX
port 2000
proto udp
dev tun
tls-auth /etc/openvpn/easy-rsa/keys/auth.key 0
ca /etc/openvpn/easy-rsa/keys/ca.crt
cert /etc/openvpn/easy-rsa/keys/server.crt
key /etc/openvpn/easy-rsa/keys/server.key # This file should be kept secret
dh /etc/openvpn/easy-rsa/keys/dh1024.pem

#server-bridge 172.16.5.1 255.255.255.0 172.16.5.100 172.16.5.150

server 172.16.5.0 255.255.255.0

#ifconfig-pool 172.16.5.10 172.16.5.150 255.255.255.0
push "route-gateway 172.16.5.1"
#client-config-dir /etc/openvpn/ccd

#ifconfig-pool-persist /etc/openvpn/ipp.txt
tls-timeout 120
auth MD5
push "route 172.16.5.0 255.255.255.0"
cipher BF-CBC
#change this to your companies DNS server or omit it entirely
push "dhcp-option DNS 172.16.5.1"
keepalive 10 120
comp-lzo
max-clients 100
user nobody
group nobody
persist-key
persist-tun
status /tmp/openvpn-status.log
log-append /var/log/openvpn.log
verb 6

Клиент Win2k, конфиг:
dev tun
proto udp
remote XXX.XXX.XXX.XXX
port 2000
client
resolv-retry infinite
ca ca.crt
cert client.crt
key client.key
pull
tls-client
tls-auth auth.key 1
auth MD5
cipher BF-CBC
ns-cert-type server
comp-lzo
persist-key
persist-tun
verb 6

ВПН устанавливается но пакеты не ходят, IP клиент не получает.

P.S.

SERVER openvpn # cat /etc/conf.d/net
# This blank configuration will automatically use DHCP for any net.*
# scripts in /etc/init.d. To create a more complete configuration,
# please review /etc/conf.d/net.example and save your configuration
# in /etc/conf.d/net (this file :]!).
................
................
routes_br0=( "default via 172.16.5.254" )

depend_br0() {
need net.tap0 net.eth0
}

tuntap_tap0="tap"
config_eth0=( "null" )
config_tap0=( "0.0.0.0 promisc" )
bridge_br0="eth0 tap0"
config_br0=( "172.16.5.1" )

eth0 внешний, br0 шлюз для локалки.
По замыслу клиенты должны становится членами одной сети с локалкой на br0