Hello everybody, 

I have configured some Wireguard VPN accesses to my network.

When I'm connected with a client, the client as full access to all of my VLANs and network ressources. 

I'm wondering how I can restrict this access?
I would like to configure the clients by their purpose:

- normal VPN user: only internet access via the tunnel

- internal VPN user: access to the NAS and IOT devices (two seperate VLANs)

- admin VPN user: access to all network ressources

Thank you in advance.

BR
Sebastian