VPN

I've read through the setup docs, but am having trouble seeing if m0n0wall can support this configuration I want..

In a virtual environment, I plan on using a VPN appliance to connect many site-to-site VPN tunnels to my local VMs.

So I will have many tunnels, approx. 1 per VM.

For security reasons, I want to set up the VPN appliance VM to have many local 'interfaces', one per tunnel. That way, no VPN subnet will be accessible from another one, even if one of the local VMs gets hacked. (excluding the VPN appliance of course).

Does m0n0wall support this? I was looking at the VPN setup, and it does not allow me to specify the local interface the VPN tunnel would be accessible on.. Can I set the VPN endpoint interface to the local instead of the WAN?

TIA

I'm pretty sure the VPN daemon listens on all interfaces (I can open a pptp tunnel to any IP private or public on my box).

I haven't found a setting to change this.