Dynamic firewallrules for vpn users?

[spiritbreaker]

Hi all,

i can define rules on ipsec interface to allow/block pakets from mobile Ipsec pool to internal ressources.

But is it possible to define firewallrules on per user basis? According to defined users in localdatabase/radius.

e.g. allow user "test" to access a ressource (like a serveripadress)

thx cya