VPN--restricting access

[meadedood]

I'm CCNA, but completely new to VPNs. I have, what I think, is a relatively easy VPN question.

I want to allow a vendor to access the server they support via VPN on our PIX 515. Yet I want to restrict the vendor from accessing ANYTHING else. We're running a Windows 2003 domain. What's the best way to accomplish this? Can the restricing be done in the PIX? Is there a better way?

Thanks much!!!

 

[lgarner]

It must be done on the Pix; the server OS isn't relevant. I think the simplest way is to set up another vpn group, with a separate address pool, and filter on those IP addresses.