This is pretty easy. Create a new network list (Configuration -> Policy Management -> Traffic Management)with only the two IP addresses you want and save that. Create a new group (you could probably just copy the same settings from the one you use primarily) and under the client config of that group, select the new network list for the Split Tunneling Network List. Create a profile for that group. Personally, I would use local authentication with some randomly generated passwords.
It is what it is!!
__________________________________
A+, Net+, I-Net+, Certified Web Master, MCP, MCSA, MCSE, CCNA, CCDA, and few others (I got bored one day)