Site-to-Site IPSec VPN on ZyWall 110 pointing to particular VLAN only

@Anatoliy
Regarding to this case,
just configure the Vlan in the VPN's local and remote policy, so the remote client only can access to particular Vlan via VPN tunnel.
EX:
Go to Configuration>Network>Interface> configure Vlan interface

Configure the VPN profile, and create the IP range which related with Vlan. 

set vpn policy