Heads Up :
The post you are writing will appear in a public forum. Please ensure all content is appropriate for public consumption. Review the employee guidelines for the community here.
With mode Config you can assign your user a routable pool address that once the tunnel is built will allow him/her to access the entire internal network.Check this out:http://www.cisco.com/warp/public/707/25.html