Client Isolated VLAN from VPN

Greetings fellow networkers,

I'm looking for a product recommendation for this problem.

I have 5 to 10 users that will be VPN'ing in and I would like to send them each to their own isolated VLAN. Anyone know of a SMB/Enterprise router that would work for this?

Something that is IPSEC or SSL would be fine for this use. It would be using a local/internal DB for auth.

TIA