How to restrict Internet access by ip, on Mikrotik?

Question

Mikrotik

On Mikrotik, the Internet rises, the usual pptp connection. A Vpn connection is also raised, through which clients with ip (192.168.0.120-130) access the Internet. But there is a problem, how vpn is disconnected, clients go through the regular Internet. How to allow traffic on Mikrotik only through vpn with the right ip?

Answer 1

half incomprehensible, little data

Answer 2

mark connections from these clients and route them to vpn, as soon as vpn drops, the client with the marker remains without a route and there is no internet.

Answer 3

Make masquerading by SRC-Address and ppp interface.