I have a VPC
(10.0.0.0/16) with public
(10.0.1.0/24) and private
(10.0.2.0/24) subnets. I have ELBs in the public subnet and EC2 Webservers in the private one. I've also setup a VPN Gateway, Consumer Gateway and a VPN connection to allow a client to access our VPC.
How do I lock down the VPN connection to a subnet that is dedicated only for VPN (VPN-only subnet). I am planning to have EC2 instances in the VPN-only subnet and the client should be able to access those servers.