I have collected tips from several of my posts on various configurations for Roadwarrior client access to the GREEN IPFireB network via IPFireA.
WireGuardClient--WireGuardHost2Net--IPFireA--WireguardNet2Net--IPFireB--GreenNet
OVPNClient--OVPNHost2Net--IPFireA--WireguardNet2Net--IPFireB--GreenNet
WireGuardClient--WireGuardHost2Net--IPFireA--OVPNNet2Net--IPFireB--GreenNet
Regards