How to organize a VPN connection via Cisco AnyConnect for a specific group of users via aaa only from fixed IP addresses?

Question

VPN

Good afternoon. It is necessary to organize a VPN connection via CiscoAny Connect for a certain group of users via aaa only from fixed IP addresses.
Judging by the documentation, aaa has both user groups and acl for them, but I still have no idea how to configure this bundle.

Answer 1

In the end, I did it the easy way. I allocated a separate piece of hardware for these clients, hung an Access-list interface on the WAN in which I blocked port 443 for all but the specified IPs.