Namespace configuration

I have to let internal users access the external site, but external users should not be able to access the internal site. I also want to keep the login process as easy as possible. what should I do. I was thinking that I should seperate internal and external namespaces, but keeping the same logon and e-mail name. Is that the best solution.

Any takers