Track VPN User Assigned IP Address

Unanswered Question
Feb 26th, 2008

Folks I have a customer that has a requirement to track the IP Address a VPN user is assigned upon connecting to their ASA.

I have looked at the 'logging list' and while that works by sending syslog messages it sends ipsec and ike which is a huge amount.

Is there a way to do this a bit more elegantly?

  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
pdriscoll Tue, 02/26/2008 - 11:21

Tom - are the users being assigned an address from an address pool? If so, is the user base larger (oversubscribed) or smaller than the pool of addresses? Are the users authenticating from LOCAL or TACACS\RADIUS?


whisperwind Tue, 02/26/2008 - 11:49


Yes they are being assigned from a local pool

The pool is smaller than the number of users.

They are authenticating locally.


This Discussion