static IP on a VPN client...

Unanswered Question
May 10th, 2011

/* Style Definitions */ table.MsoNormalTable {mso-style-name:"Table Normal"; mso-tstyle-rowband-size:0; mso-tstyle-colband-size:0; mso-style-noshow:yes; mso-style-priority:99; mso-style-qformat:yes; mso-style-parent:""; mso-padding-alt:0in 5.4pt 0in 5.4pt; mso-para-margin:0in; mso-para-margin-bottom:.0001pt; mso-pagination:widow-orphan; font-size:11.0pt; font-family:"Calibri","sans-serif"; mso-ascii-font-family:Calibri; mso-ascii-theme-font:minor-latin; mso-fareast-font-family:"Times New Roman"; mso-fareast-theme-font:minor-fareast; mso-hansi-font-family:Calibri; mso-hansi-theme-font:minor-latin; mso-bidi-font-family:"Times New Roman"; mso-bidi-theme-font:minor-bidi;}

I have a question. I have a client that VPN into our network. When he logs in he is assigned an ip address out of the VPN POOL. Is there a way to assign a static IP to his VPN client so when he logins into the VPN his static IP will work. There is an IP address in the VPN POOL that I want to assign him. I don’t want to make a special VPN. Thanks.

dave

I have this problem too.
0 votes
  • 1
  • 2
  • 3
  • 4
  • 5
Average Rating: 0 (0 ratings)
dave.cordova Tue, 05/10/2011 - 07:37

My problem is that I have over 100 users that may need static IP address and it looks like i'll have to add each user in the local user area and assign them a static ip. I didn't know if there was  a way to have the enduser computer to have a static IP and when they connect to the VPN Pool it would know in the IP Pool in the ASDM not to use the static IP that was assign. Hope this makes sense. THanks.

dleonmur Tue, 05/10/2011 - 07:42

Dave,

Actually I did not understand your last statement:

.." I didn't know if there was  a way to have the enduser computer to have a static IP and when they connect to the VPN Pool it would know in the IP Pool in the ASDM not to use the static IP that was assign.."

If you want the ASA to assign static IP address and the authentication is local this is the only way to do it....if you use an ACS to authenticate the users I believe there is a way to inject the IP address by using RADIUS.

DL.

dave.cordova Tue, 05/10/2011 - 07:52

Sorry about that. I had people talking to me as I was typing.

I have around 100 users with laptops. Currently they VPN and is assigned an IP address in the address pool. Instead of making 100 local users and assign them a static IP in the ASDM, is there a way on the VPN client to assign an static IP address and still keep the address pool?

dleonmur Tue, 05/10/2011 - 07:57

Sure,

Actually with the configuration sample I sent you, only the users you configure with the parameter "vpn-framed-ip-address" will use that static IP address...the rest of them shoud use the other IPs from the assigned pool to the VPN tunnel group.

HIH.

Actions

Login or Register to take actions

This Discussion

Posted May 10, 2011 at 6:11 AM
Stats:
Replies:6 Avg. Rating:
Views:989 Votes:0
Shares:0
Tags: No tags.

Discussions Leaderboard