Anand

Either I do not understand your question very well or you are misunderstanding how the VPN dialer on the ASA5510 works. I am not sure which. It seems like you are expecting the mobile client to input only a group name and a group password and that should be enough to authenticate the incoming user session. But that is not how it works. The group name and password are the first stage of identifying the user but are not sufficient to fully identify and authenticate the user. The group name and password are used primarily to determine which policy to apply to the session. You might have several different groups defined with somewhat different policies for each group. So the group name and password determine the appropriate policy and the user name and password authenticate the individual user. group name and password without user name does not work and user name and password without group does not work.

If I have misunderstood your question then perhaps you can clarify.

HTH

Rick