adding options might help … if already there, check the client log , eventually increase log-level to get more info.
mssfix 0
fragment 0
resolv-retry infinite
remove “–remote” (if you have it there)
I do not know the new-macs much (i am PPC old guy), but i think you have to also check the network setup (and allow some services on that adapter/network). If there is no specific enable/disable stuff in firewall/network, you will need to add some routing rules by your own to client config (or in general in OSX) to handle each network/subnet individually. Testing openvpn from same network is always routing-headache 