The ASA can provide the VPN addresses via DHCP.
back to topic: Why shouldn’t. systems on the main LAN not be able to communicate with VPN clients on a different LAN? For sure that works.
If you found this post helpful, please give it Kudos. If my answer solves your problem, please click Accept as Solution so others can benefit from it.