We have a problem with using IP-adress as source for a label. The way we have done it is to put all people in one geografical place with the same subnet. We then tried to create a label filtering on the first 3 sets of numbers in the IP omitting the last 3 (eg. Beginning with 192.168.0. But when people connect through VPN from home it is their home IP that is used in this filtering. How can we solve this problem?

I have started looking at LDAP Labels and thinks that must be where to go!?