DHCP and VPN 3000 Concentrator

Unanswered Question
Aug 18th, 2009
User Badges:

Is there a way I can have clients get an IP from a windows dhcp server scope other that the scope the concentrators internal interface is on? I'm running out of IP's on that subnet.


  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
dennis-wilson Tue, 08/18/2009 - 12:47
User Badges:

Yes I have that already. My windows dhcp server has many subnets for my vlans and remote networks. I want my vpn clients to get an IP from a specific subnet scope that's not on the same subnet as the vpn concentrators internal interface. Can this be done? It just defaults to the same subnet as the internal interface.


slmansfield Tue, 08/18/2009 - 12:57
User Badges:
  • Silver, 250 points or more

I think the default behavior is to use the subnet of the private interface, but you can change that. Please see this description.

DHCP Network Scope - To use this feature, the VPN Concentrator must be using a DHCP server for address assignment. To configure a DHCP server, see the System | Servers | DHCP screen.

Enter the IP sub-network that the DHCP server should assign to users in this group, for example: The DHCP Network Scope indicates to the DHCP server the range of IP addresses from which to assign addresses to users in this group.

Enter for the default; by default, the DHCP server assigns addresses to the IP sub-network of the VPN Concentrator's private interface.

dennis-wilson Tue, 08/18/2009 - 13:00
User Badges:

Yeah I tried that also with no luck. I will look at that again.

slmansfield Wed, 08/19/2009 - 05:40
User Badges:
  • Silver, 250 points or more

You might just verify that the VPN client userid is in the group whose DHCP scope is reconfigured. The documentation emphasizes that this change is associated with a group on the concentrator. Otherwise it will take the default.



This Discussion