IP Reservation for User rather than MAC Address

[silver565]

I've got to possible ways I can think of doing this in my head.

Scenario. User connects through a sonicwall device via SSL VPN and gets a static IP every time, despite what device they come from.

1. LDAP somehow supplies the IP from a DHCP server behind the sonicwall
2. The sonicwall somehow supplies the static IP on the interface that the net extender is connected to.

Does anyone know if something like this is possible?

Thanks!

 

[riser]

You could use AD attributes to assign the IP address to the User Account.

You would want a segmented VLAN that would dish out DHCP to connect the device, then an application or a script that could read AD (Default Domain Users). You would want the app or script to query the local device (computer) for the current logged in user, query against AD and pull that attribute down. Your App or Script would then change the IP address, resulting in a possible disconnect of the network since it is VPN. You might be able to work around that disconnect though with some creative thinking.

Or you could segment off a specifc VLAN for the user and when they log in, the computer is moved into that VLAN for whatever access is needed.

 

[silver565]

You could use AD attributes to assign the IP address to the User Account.

You would want a segmented VLAN that would dish out DHCP to connect the device, then an application or a script that could read AD (Default Domain Users). You would want the app or script to query the local device (computer) for the current logged in user, query against AD and pull that attribute down. Your App or Script would then change the IP address, resulting in a possible disconnect of the network since it is VPN. You might be able to work around that disconnect though with some creative thinking.

Or you could segment off a specifc VLAN for the user and when they log in, the computer is moved into that VLAN for whatever access is needed.

Thanks for the reply. Time to brush up on my scripting skills I think