Site - Site VPN with different Access Rights.

The remote LAN does not have any Domain to log on to. BUT I have another idea! lol

Place a switch on the network which assigns vlan access based on your MAC address add a dhcp scope for each vlan.

VLAN 1 - based on known MAC addresssess - this is not going to be a admin nightmare apparently
this vlan.

Then use this to filter ip's at the PIX. What you think????

The remote LAN does not have any Domain to log on to. BUT I have another idea! lol

Place a switch on the network which assigns vlan access based on your MAC address add a dhcp scope for each vlan.

VLAN 1 - based on known MAC addresssess - this is not going to be a admin nightmare apparently

VLAN 2 - this vlan provides access to all other users..

Then use this to filter ip's at the PIX. What you think- Workable????