Differentiate IPsec mobile clients for LAN/internet or internet acces only?

[krolykke]

The subject says it all really. I have been thinking about how I could do it, f.x. by grouping users and somehow use different phase 2 for them but I can't crack it. Any (almost) method to achieve this is welcomed  :D

Thanks in advance and have a great day all.