For various reasons, I would need different users to use a single VPN iOS IPSec tunnel to get to different subnets based on the user.
I can have them connect, and the XAUTH user is correct.
Then I used "set groups" in my firewall policy.
The result is that the user gets an authentication banner. When entering credentials, he will get to the right subnet.
Is there anyway I can do without this banner ? The user is already authenticated, so how can I manage that ?