J
Joe
We are trying to implement some auditing software that requires a entry into
a login script in order to start the audit SW. However, it needs to be
customized in order to work in our situation because we need to determine
what the IP address of the user is before we run the audit SW.
On our network, which includes LAN/WAN and dialup access through a Cisco
3640 router, users that dial in are given a IP address from a range that is
coded into the dialup router. Furthermore, we are using a Windows box as a
Radius Server using Cisco ACS SW. Now I can run the batch file without any
problems on users on the LAN or WAN, but those users dialing into the router
aren't working. The batch file basically runs IPCONFIG, creates a temp file
to store that value in, checks to see if the number match up to a particular
range, and if so don't run the audit software on them. Instead, what I am
getting looks like the batch file is not running in the same instance of
"command" that is being used while the user is authenticating through the
Radius server, it still reports whatever IP address was being used prior to
the client connecting to the network.(Like if the user had a home network).
If I wait until the user has completely logged into the network before
running the batch file, then it works as it should and reports the correct
IP address that was issued to the user once they connected, which allows us
to differentiate between our dial-up users and those attaching to the
network through the LAN or WAN.
Since the batch file is working, is there anyway to delay whne the batch
file runs, somehwere other than the login script?
Thanks for the help
J.M.
a login script in order to start the audit SW. However, it needs to be
customized in order to work in our situation because we need to determine
what the IP address of the user is before we run the audit SW.
On our network, which includes LAN/WAN and dialup access through a Cisco
3640 router, users that dial in are given a IP address from a range that is
coded into the dialup router. Furthermore, we are using a Windows box as a
Radius Server using Cisco ACS SW. Now I can run the batch file without any
problems on users on the LAN or WAN, but those users dialing into the router
aren't working. The batch file basically runs IPCONFIG, creates a temp file
to store that value in, checks to see if the number match up to a particular
range, and if so don't run the audit software on them. Instead, what I am
getting looks like the batch file is not running in the same instance of
"command" that is being used while the user is authenticating through the
Radius server, it still reports whatever IP address was being used prior to
the client connecting to the network.(Like if the user had a home network).
If I wait until the user has completely logged into the network before
running the batch file, then it works as it should and reports the correct
IP address that was issued to the user once they connected, which allows us
to differentiate between our dial-up users and those attaching to the
network through the LAN or WAN.
Since the batch file is working, is there anyway to delay whne the batch
file runs, somehwere other than the login script?
Thanks for the help
J.M.