Simple ACL only allowing access to single PC

[insccisco]

hey guys, this should be quick to you guys.

I need to restrict Cisco VPN users dialing in remotely using the Cisco VPN Client to only access one single PC in the network.

Can you help me in creting such an access-list?

Inside Network: 10.10.35.0/24

VPN Clients subnet: 10.10.135.0/24

thanks

[gojericho0]

what is the ip address of the machine you want them to connect to?

[insccisco]

I only need the remote VPN clients to access 10.10.35.4

[srue]

It would help to know what the vpn device is. IOS router? PIX/ASA?

Is split tunneling enabled? You could just allow access to this one host if so.

[insccisco]

sorry about that... It is a Cisco 1841 router.

[gojericho0]

If it's just a router, you could put an inbound extended ACL restricting any traffic to only that IP address