VPN with restrictions

RouterOS General
1

Hello

There is a LAN.
The edge router is Mikrotik on OS 7.14.
There are several VPNs for people working remotely.

Question 1:
How to create another VPN, but one that allows the employee to access only one host (one IP address) within the network?

Question 2:
How do I make it so that only specific ports work and that the ICMP protocol also works?

–
Regards

Adam.

2

High level
Q1: create VPN and using firewall rules and VPN interface in forward chain restrict access to only 1 destination device (allow to one dest, drop all the rest coming from that interface).

Q2: similar approach.

What VPN are you planning to add ?

3

Thanks

Q2: similar approach.

What VPN are you planning to add ?

Probably L2TP.