I think if you ultimately want to monitor activity on IP addresses, the right way to go about it would be to implement something along the lines of RAS with RADIUS/TACACS or a VPN.

The above mentioned technologies were invented for this very reason.