Is it possible to separate by group membership users who can authenticate for VPN access only from users who can authenticate for VPN access AND network device access? My customer has some older network gear which does not support the AAA authorizati...