DHCP and VPN 3000 Concentrator

Unanswered Question
Aug 18th, 2009

Is there a way I can have clients get an IP from a windows dhcp server scope other that the scope the concentrators internal interface is on? I'm running out of IP's on that subnet.


I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Overall Rating: 0 (0 ratings)
dennis-wilson Tue, 08/18/2009 - 12:47

Yes I have that already. My windows dhcp server has many subnets for my vlans and remote networks. I want my vpn clients to get an IP from a specific subnet scope that's not on the same subnet as the vpn concentrators internal interface. Can this be done? It just defaults to the same subnet as the internal interface.


slmansfield Tue, 08/18/2009 - 12:57

I think the default behavior is to use the subnet of the private interface, but you can change that. Please see this description.

DHCP Network Scope - To use this feature, the VPN Concentrator must be using a DHCP server for address assignment. To configure a DHCP server, see the System | Servers | DHCP screen.

Enter the IP sub-network that the DHCP server should assign to users in this group, for example: The DHCP Network Scope indicates to the DHCP server the range of IP addresses from which to assign addresses to users in this group.

Enter for the default; by default, the DHCP server assigns addresses to the IP sub-network of the VPN Concentrator's private interface.

slmansfield Wed, 08/19/2009 - 05:40

You might just verify that the VPN client userid is in the group whose DHCP scope is reconfigured. The documentation emphasizes that this change is associated with a group on the concentrator. Otherwise it will take the default.



This Discussion