I have wireguard VPN server on my router. I have peer for this VPN and his IP address 10.10.100.2 How can i say in firewall that this ip 100.2 can connect to host in VLAN10, but cant to other host VLA