Manage different users through a single iOS IPSec tunnel

[Philippe_ASTIER]

Hi all,

For various reasons, I would need different users to use a single VPN iOS IPSec tunnel to get to different subnets based on the user.

I can have them connect, and the XAUTH user is correct.

Then I used "set groups" in my firewall policy.

The result is that the user gets an authentication banner. When entering credentials, he will get to the right subnet.

Is there anyway I can do without this banner ? The user is already authenticated, so how can I manage that ?