[VPN] Site-to-site with session control?

[Little, Mike (BHS)]

All,

I currently have 5 vendors who support our organization who want to set up
site-to-site VPN connections.  They have a variety of vpn hardware but my
concern is not being able to establish the connection, it's being able to
exercise some control over how that connection is used.  That is, we'd like
to put in place some way to have session control over the link so that we
know what particular user is coming in and when, etc.

We currently have Nortel CES2000s in place but have just received the
CES2700s which I'm preparing to upgrade to.  We also purchased the firewall
license, which I hope will help, but I don't think it will force any type of
additional authentication on the individual user level.

Does anyone have any ideas on how to implement a branch-to-branch
(site-to-site) connection but still force those who want to use it to have
to provide additional authentication?  We have a radius server in place and
an AD network.

I'll be moving forward with this soon and if I can discover a way to get
this accomplished, I'll follow up with a message myself.


Thanks for the help,

Mike Little
Network Services
Baptist Healthcare System