I have a working 5500 that I need to modify. I need to be able to permit specific VPN groups to access certain internal networks. For example I want one group to be able to access 10.41.20.0/23 and another access to 10.96.11.0/24. I still would need one admin group that access to all internal network. Any help would be greatly appreciated. I have read all the docs I can get my hands on and nothing seems to work.