I managed to configure ovpn connection to my router.
I set remote address of some user on 192.168.88.195. He is able to connect with every device in 192.168.88.0 network.
How i can restrain his access and allow him only to connect only with one specific IP ?
For instance, the user should be able to reach only 192.168.88.100, which is address of server he should connect with. Rest of devices in the network shouldn’t be reachable for him.
Just drop all with your /vpn client/ src address /88.195 for exemple/ except dst address 192.168.88.100 in forward chain :
/ip fi fi add action=drop chain=forward src-address=192.168.88.195 dst-address=!192.168.88.100