of course it does (unless you allow traffic from everywhere). because you are now accesing the cluster from the vpn so the server does not see your address but the vpn gateway (what would be the point of using a vpn if others could see your real address). you must allow traffjc from the vpn address range.