There are many ways to do this, one of common practice is to have proxy server with default web page for authenticating your net user, once they are authenicated main their record in data base by storing thier ip address and creating active session id for them to access net.