2950 dearly in need of supernetting and variable length subnetting.
eg subnet class c into 2 networks
192.168.1.0/25
192.168.1.128/25
limit remote vpn connections to subnet 1 or subnet 2 via /25 subnet mask in vpn profile.
2820 = 3.3.2_RC5
2950 = 3.2.4