Vpn not for all devices - how to?

How are you trying to do it - using the pbr package or creating custom ip rules/routing tables?
Either way we'll need to see the configuration(s) before we can help.

You mean there is a connection to the vpn server but you can't access the internet through it, right?