Now that you've set that up, nobody can connect.
No, they can connect. You don't need (can't have) a VPN tunnel to connect. Once connected (open access point), however, the router won't route anything past itself until the client creates the VPN tunnel.
If you think the system is working, ask someone who's waiting for a prompt.