A method and device for providing switched tunnel connections from a user to a destination or a multiple number of destinations. Tunnels are switched from a user to a destination by receiving an incoming tunnel connection from the user and initiating a switched tunnel connection to the destination. Traffic from the incoming tunnel is switched to the destination over the switched tunnel. A disclosed embodiment uses user information to determine the switching of the tunnel to implement security access to a tunnel destination, load balancing among destination resources, and bundling of tunnel sessions to implement high bandwidth transmission.