How to Restrict Cisco IOS Router VPN Client to Layer-4 (TCP, UDP) Services - Applying IP, TCP & UDP Access Lists

Configure and setup your Cisco VPN router to restrict IPSec VPN clients to specific IP addresses, networks, TCP or UDP ports & network services. Learn how to overcome Cisco IOS VPN group access list limitations (TCP/UDP Services) while giving you maximum control, flexibility and granularity over your Cisco IPSec VPN clients and groups.

http://www.firewall.cx/cisco-technical-knowledgebase/cisco-routers/941-cisco-router-vpn-client-acl.html