OpenVPN access to gateway

I've set OpenVPN client in ERX. 

Let's say my main network isk 192.168.1.0 and oVPN network is 192.168.2.0

There is only one rule for routing the clients at the moment (push-route 192.168.1.10/32).

If client types 192.168.2.1 in browser he is presented at the ERX main page, he can also login via SSH, and so on.

How can I block all these options for VPN users? Only to be accessed from 192.168.1.1, but not 192.168.2.1.

Thanks!