I have a W2K Server functioning as an RRAS server. Users have access either by Modem or VPN. When I look at the logs I see no way of knowing if users have come in through the modems or via VPN. I am trying to get users to use VPN to avoid long distance and #800 charges.
Here is a typical log entry from a users access. Log is in IAS format.
192.168.1.1(IP Address Changed),dantel\jsmith,07/21/2003,12:23:04,RAS,DOCSERVER,6,2,7,1,5,2,61,5,64,1,65,1,31,12.206.49.218,66,12.206.49.218,25,311 1 126.1.20.14 05/03/2003 00:03:36 959,44,8118,8,192.168.1.2,12,1500,50,1885,51,1,55,1058815382,45,3,46,5425,43,1129635,42,348329,48,3197,47,2729,49,1,40,2,4108,192.168.1.1,0,,4147,311,4148,MSRASV5.00,4120,0x0044414E54454C,4294967206,0,4136,4,4142,0
Here is a typical log entry from a users access. Log is in IAS format.
192.168.1.1(IP Address Changed),dantel\jsmith,07/21/2003,12:23:04,RAS,DOCSERVER,6,2,7,1,5,2,61,5,64,1,65,1,31,12.206.49.218,66,12.206.49.218,25,311 1 126.1.20.14 05/03/2003 00:03:36 959,44,8118,8,192.168.1.2,12,1500,50,1885,51,1,55,1058815382,45,3,46,5425,43,1129635,42,348329,48,3197,47,2729,49,1,40,2,4108,192.168.1.1,0,,4147,311,4148,MSRASV5.00,4120,0x0044414E54454C,4294967206,0,4136,4,4142,0
