We have 4 sites linked together (Draytek VPN lan to lan linked) and use VLANs at some sites to stop internet PCs having access to critical systems. The only problem is, this works at the site concerned but it doesnt stop these PCs accessing other kit across the VPN link. Can I block VPN from certain VLANs or stop certain MAC or IP being able to use the lan to lan VPN?

We are using Vigor2850's