VPN forward to list of hosts only

Howdy,

I have OVPN on a RB450. Only purpose of the board is VPN

Now, when a certain client is dialing in, I need to limit this clients access to a list of hosts ( and only one port - say 8181, which is the same all the time for this client )
The client gets an IP from a pool assigned - within the same subnet all the time of course
The list of host should be easily updateable. I am thinking of a plain file upload.

Any hints are highly welcome, thanks in advance

Oskar

There are various ways of achieving this but you might make life easier on yourself by giving the client a static IP assignment and then using the static IP assignment to point them into a limited routing table.

Have a look at VRF and Routing Rules on the Wiki.

Thanks !

Oskar