Comment by unixhero

>I've been moving away from this model towards user-asssociated VPNs or (inverse) captive portals.

Would you care to share how you achieve this/what does the implementation of these two look like?