[TriLUG] OT: policy based VPNs on LAN?

[Mike Johnson]

gregbrown at mindspring.com wrote:

> Security Paranoid Company would like to define access to various
> parts of the network based upon user roles.  SPC also would like
> users to be forced to use not only a username/password but a security
> token for login (like a secureID token).

Half of your solution:
http://www.openbsd.org/faq/pf/authpf.html

For the other half, this page has some info:
http://software.newsforge.com/software/04/09/28/1419251.shtml?tid=78&tid=8

Mix, match, enjoy.

Mike