Do you have to use RADIUS? You could setup password authentication directly through the Pix. Then you could use the Cisco secure vpn client to establish a vpn connection to the Pix and have the Pix authenticate your users. This seperates the Vpn p...