Policy execution based on network segments

I think I'm with you on this, but just to clarify, do you want:

a) If Casper sees it in one network IP range do X, if in a different IP range do Y
or b) If Casper sees the computer's network location setup as A do X, if network location as B do Y.

Thanks

Correct.

If casper see it in one of the network segments specified in the JSS then select network location "School"
or If the device checks in from an ip outside the specified network segments then set location to "Home"

All our school network segments for DHCP are set up under "Network Segments" in the JSS if the computer gets an ip in one of those ranges we want the computer to select the "School" network location from System Preferences>Network. If not in one of the ranges we want the computer to choose "Home network location from System Preferences>Network.

I believe when you set up Network Segments, you can create one all encompassing segment (for the internet at large) that will cover any IPs that are not in one of your other defined segments. If I'm not mistaken, a Mac will fall into the most specific Network Segment it can locate on your JSS, so any Macs on campus should fall into the smaller scope network segments and any that don't fit into one of those buckets will fall into the all encompassing range. At least I think that's the way it works, or is supposed to work.

As far as getting one policy to run either option, you can do this with a custom script perhaps, or just create 2 policies with the different options and scope one to your internal segments and the other to the external one.

Ok. I think this will be handled better by a script that runs locally with launchd. Basically check your active interface's IP address and if it's within a certain range, use networksetup to change your location. Logically:

script header

check your interface IP address

case statement do X for ip range A networksetup -switchtolocation School do y for everything else networksetup -switchtolocation Home
esac