I haven't tried it yet, but try setting up the egress gateway to your local network, and then when you generate an external client, add the address range to AllowedIP's for the local network