Hi,
The routing of packets across the vpn tunnel will be decided by the split ACL configuration on the server.
If there is no split ACL configured then the Ipsec SA will be from the assigned client IP to any which means everything from that IP will be sent across the tunnel and the ISR will decide on where to send the traffic.
The differentiation by the server will be based on the IP addresses assigned to each of the clients.
For example, if the IP assigned to the client is 172.16.12.3 then the Ipsec SA will look like this.
local ident (addr/mask/prot/port): (0.0.0.0/0.0.0.0/0/0)
remote ident (addr/mask/prot/port): (172.16.12.3/255.255.255.255/0/0)
Thus the EZvpn server will know how to reach each of these clients individually.
Rate the post if it helps