IPSEC VPN Client only allow access to one VLAN not all

In policy use SRC address=LAB_B IP and dst-address=remote pool.