It's a EZ VPN to a commercial provider. What I really want to do is just route 4 clients of my LAN based on there IP but I don't think this is possible so I thought VLAN would be the next best thing. So do I just create an access list and apply it to the virtual interface?