User specific routing

[steffda]

Hallo everyone,
i configured an IPsec-tunnel from my mobile to an OPNsense firewall located on a vserver. Via this vserver i'm going to the internet.
This is working fine now.
Alternatively i want go via the Tor-network to the internet.
Between VPN only and the VPN - Tor alternative i want select by situation.

From my point of view it would be the easiest way to have to users: one for VPN only and one for VPN-Tor.
So i'm looking for a possibility define a attribute to each one of the users (e.g. IP adresses from different networks) or something like user-specific firewall rules.

Has anyone an idea how to do that?