connecting to separate subnet

[HeathP33]

we have two MX devices.MX67 with a subnet 10.100.1.0/24 for our engineers. The second MX250 has subnet 172.16.4.0/24 for our user and servers, including a DUO MFA proxy.  I want the engineer to use use client VPN on MX67, but have access to our DUO MFA server behind on the second MX250.

Any thoughts on how to accomplish this would be helpful

[PhilipDAth]

Are these two different sites, and is AutoVPN enabled between the sites?

If so, as long as the client VPN is configured for full tunnel, and 172.16.4.0/24 is enabled for AutoVPN - it should work.  Also make sure the client VPN subnet is included in AutoVPN.