I would like to limit the LAN side IP addresses reachable when connecting from the WAN VPN. Is there a good doc on how to accomplish this goal?
On eCatcher, you can limit the connectable devices here:
Right click on your device and go to properties > LAN & Firewall > Configure LAN Devices & Subnet and then add the devices you want and change the firewall from standard to high