Track VPN User Assigned IP Address

[whisperwind]

Folks I have a customer that has a requirement to track the IP Address a VPN user is assigned upon connecting to their ASA.

I have looked at the 'logging list' and while that works by sending syslog messages it sends ipsec and ike which is a huge amount.

Is there a way to do this a bit more elegantly?

[pdriscoll]

Tom - are the users being assigned an address from an address pool? If so, is the user base larger (oversubscribed) or smaller than the pool of addresses? Are the users authenticating from LOCAL or TACACS\RADIUS?

Patrick

[whisperwind]

Patrick.

Yes they are being assigned from a local pool

The pool is smaller than the number of users.

They are authenticating locally.