10388d26_WRT_routers___DanielPocock_com__Description
[Zone name] vpn_b [Description] 
These are managed laptops that have a low probability of malware infection. They may well be using smart cards for access control. Consequently, they are more trusted than the vpn_a users and have access to some extra intranet pages and file servers. Like the smart-phone users, they use the VPN tunnel for general internet access/browsing, to avoid surveillance by third-party wifi hotspot operators.
Practical VPNs with strongSwan, Shorewall, Linux firewalls and OpenWRT routers | DanielPocock.com
Description