Alrighty all.   I want to thank you for your tips and guidance.   I am smarter than I thought I was, yet still pretty dumb, because I attempted to remote in to the client in question and it worked.  Though I couldn't ping it, I could remote, proving my Client VPN can share resources between the subnets,   (I had previously allowed remote access on the PC in question)   The ping issues must indeed be the client firewall configurations.  So I am in business.  I guess I should have tried the ultimate goal before thinking I had an issue.   I might still enable Ping through group policy when I roll out Azure AD but for now I am good.   Thank you again for your help.   ... View more

So looking at my config again, I do not have the VPN on VLAN.  It is on a different subnet (defined).  Again, I can ping that gateway, but I can't see or ping that desktop.   ... View more

Thank you much for your reply.   So I definitely have the VPN set to issue IPs not anyone else on the network. The 10.9.1.0 subnet is unique.  I set it up as a separate vlan only because I thought it was best practice.     ... View more

Thank you.    So here is other dynamic.  There is currently no Domain.  So there is no group policy. There will be soon but one step at a time.   I will check the setting on the client.  I know mine allows pings.  I'll take a look and thank you again.   P.S. The MX84 is the default gateway for all devices on VLAN 1 yes ... View more