With group policy support, network administrators can define user-based group policies to manage resources. Individual users can be assigned access control policies when they log on to the Point-to-Point Protocol (PPP) or Layer Two Tunneling Protocol (L2TP) session.
Users can be identified as belonging to a specific class of user. Each class has its unique policy that defines resource limits (such as number of links allowed in a multilink bundle), attributes (such as IP forwarding), and the identification of what set of IP packet filter rules to apply. For example, with group policy support, network administrators can define a Work_at_Home group that allows full access to the network or a Vendor_Workers group that is restricted to a set of services.