cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
374
Views
0
Helpful
3
Replies

IOS EZVPN and Static IP Address

derekgaff
Level 1
Level 1

Have approx 50-60 EZVPN Clients terminating on our Server. I would like it so that each ezvpn client is give a static ip address, nainly for management polling. The only way I can get ezvpn to work at the moment is with a DHCP on the Cisco ACS Server, the pool is assigned to the EZVPN Group.

Any ideas,

3 Replies 3

Ivan Martinon
Level 7
Level 7

If you are using Radius, you can configure the Framed-IP Address attribute to pass the ip address for the user that has been authenticated. Assigning an ip address per user is the best approach you have.

Hi Imartino

Thank you for your reply, but correct me if im wrong here. But isent the IP Address assigned to the client at IKE stage of the IPSec setup. The username authentication comes afterwords.

Just to confirm, what you are saying. There are two authentications per setup, first one is Group Name/Password and the second one is the ezyvpn username password.

Which one are you refering too. Just to let you know that all our clients use the same Group Name/Password for the IKE stage, only difference between clients is the ezvpn username/password. All clients are part of the same customer.

regards

Derek

IP address assignment comes on the MODE CONFIG message/stage if the EZVPN setup, MODE CONFIG comes after IKE has been completed and for IKE (Phase 1) to be complated Xauth needs to be succesful hence user authentication comes before the ip address is assigned.

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community: