Restricting users to access a single RDP session

I may be wrong, but it might not possible. you should apply f5 APM(Firewall) rule to achieve this setup.

Please clarify the question. Do you want to restrict the users' access to a network subnet or the number of RDP sessions they can launch 'through' a Virtual Server?

Users to access network subnet. Currently my internal network configured for 10.1.1.0/24 , do i need to split the network , or any kind of vlan configuration i need to do. My exact requirement is users can do RDP to only one IP subnet , thats their Jumpstation. like 10.1.1.10 . they cannt do RDP to any other server. The next ip 10.1.1.12 i wanted to map to ohter use ..