asus RT-AC66U Merlin use as a dedicated VPN server

[Merlijn]

Hi all, i'a bery new here.
A have q question about setting up the RT-ac66U .

'There is already a network/internet connection to al pc's in the local net work say 192.168.2.100 thru 150
the ip's are static.

What i need form the merlin openvpn server
User 1 logged in with openvpn may only access pc's in local lan 192.168.2.100
User 2 logged in with openvpn may only access pc's in local lan 192.168.2.101
User 3 logged in with openvpn may only access pc's in local lan 192.168.2.104-105,106
So users logged in can only access specific pc's

I already set up openvpn server with default settings
al users can log in but can access every pc in the local lan
when i switch off "push local lan" the we can not connect but not access any pc form the lan

can i add someting to the custom configuration like
user1 allow 192.168.2.100
user2 allow 192.168.2.100
etc

All other traffic must be blocked, and should be going to the normal router
i looked at parental control but then i need to do this for 50 pc's.
Is there a setting in the firewall : block everything except VPN traffic ?