I have successfully setup remote access where my remote users can connect and authenticate against Active Directory. I have a single pool of IP addresses that the ASA5510 hands out to the remote users. Everything works great. I now have a request from a vendor that needs remote access for support issues. I need to control this access to only allow access to a single IP address within the internal network. I don't see how to control this. Do I need to create a dynamic acl and apply it to the vendors username or is there a more simple process?

Thanks in advance for any help,

Ken