Access List for VPNs

Once the clients get the access through the VPNclient they are identified through the addresses belonging to the pool you have assigned to them.

So you need:

- to avoid NAT between the internal LAN (behind the inside interface, or whichever interface [outside not included, obviuosly] the VPNclients must reach) and the pool you have assigned;

- to allow the pool to each resources they must reach and the rules must be applied on the outside interface.

For me the rule you wrote does nothing.

HTH

A.

access-list 80 permit ip 172.16.100.0 255.255.255.0 172.16.200.0

now they will be able to access the inside network 172.16.100.0