Proxy Telnet or Virtul Telnet

[spbench]

I have a requirement to allow non-VPN users telnet access to a certain network. After a little research I am unclear as to the difference between Virtual Telnet vs. Proxy Telnet. Basically, I want to authenicate telnet comeing in from the internet to access certain IPs (these IPs will change on a per user basis). Is it possible/feasible to set up TACACS+ or RADIUS with virtual or proxy telnet to allow this? Any thoughts on which is better?

TIA

[benhur.p]

Any update on this ?

[spbench]

yes, we decided on virtual telnet with ACS authentication and auhtorization. Essentially, inbound telnet is challenged by PIX. If successfull, they are passed on to an internal "telnet" server where they authenicate a second time with another set of credentials. Then they can telnet within the network, cumbersome but they should the VPN anyway.