Secondary IP and VPN

Hello All,

My question is simply this.

I have a 871 router with a primary and secondary address on the inside FE1 port.

192.168.1.1 10.0.254.1

Now I have a VPN to a remote client who also has 192.168.1.x on thier internal.

I want to have all VPN traffic from the remote site to come into the

10.0.254.0/24 network and the 192.168.1.0/24 network internally to deny all of that traffic. But both networks internally must be able to talk to each other.

Any ideas on what the access list for this would look like?

Im a little perplexed as I am not that good with accesslists

Thank you kindly

Jason Miller