object-group network lanvpntraffic_src_net
 Any 

object-group network lanvpntraffic_dst_net
 Any 

object-group service lanvpntraffic_svc
ip 

ip access-list extended lanvpntraffic_acl
permit object-group lanvpntraffic_svc object-group lanvpntraffic_src_net object-group lanvpntraffic_dst_net

class-map type inspect match-all lanvpntraffic

match access-group name lanvpntraffic_acl

policy-map type inspect LAN-VPN-POLICY
class type inspect lanvpntraffic
inspect
class class-default
drop log


zone-pair security LAN-VPN source LAN destination VPN
service-policy type inspect LAN-VPN-POLICY