Actually, we do this now for our VPN users. Cisco Secure ACS 2.6 for NT
proxies authentication requests to an ACE/Server 5.0 (works with 4.1 as
well). Fairly stright forward to set up. I believe you can get evals of both
products. Both servers have replication partners for redundancy and sit in a
firewall DMZ. VPN users must log into a VPN web site using their tokens to
obtain the VPN client.
Gonna try this with our routers RSN.