Is it possible to build two different L2TP/IPSec tunnels per subnet or per user?

[yahihassen]

Dear colleagues

I wondered whether anyone could help with this one.

Is it possible to build two different L2TP/IPSec tunnels per subnet or per user on a Cisco router or any other third party manufacturer?  The idea behind is to allow different access to resources to different support technicians.  Your help is much appreciated.

[jan.nielsen]

Sure, the ASA can use LDAP/AD information to select what access list should be applied for that specific user or group of users logging into the VPN. You can use whats called DAP or just LDAP Attribute Maps.