how can i force clients to use only OpenVpn as Gateway?
during the fail-over procedure i want to hide the real public ip to the end users.
You can check the Traffic rules, where you can assign any source communication to any destination communication and other kind of rules.
You can also use the redirect-gateway def1 option in the OpenVPN config. There's some more info on it here.