I tried to solve my problem using huntgroups, but after several days I
couldn't find a solution. Perhaps someone has an idea...
There are accounts that should only be able to connect when the
callingstationid is an ip address within 10.0.0.0/8 or 192.168.0.0/16.
Otherwise the user must be rejected. Other accounts should be able to
connect from everywhere.