How to configure the Cisco VPN 3000 Concentrator to allow a VPN client to use its real address (PPTP/L2TP)

[TCC_2]

Resolution

IPSec requires that clients be assigned an IP address when they connect to a VPN gateway. The client-supplied address feature is available only for connections through Point-to-Point Tunneling Protocol (PPTP) and Layer 2 Tunnel Protocol (L2TP).

There are two ways to configure this feature on the Cisco VPN 3000 Concentrator:

• The Global Configuration option causes all PPTP and L2TP clients to use their own IP addresses.

  To configure this option, perform these steps:

  1. Navigate to Configuration > System > Address Management > Assignment.
  2. Select Use Client Address and click Apply.

• The client-supplied address feature can also be configured for a client group.

To configure this option, perform these steps:

1. Navigate to Configuration > User Management > Groups.
2. Select the group to be updated with this option, and click Modify Group.
3. Click the PPTP or L2TP tab.
4. Place a check in the checkbox for the Use Client Address attribute.

Problem Type

Configure

Product Family

VPN - 3000 series concentrator

VPN - hardware & software clients

VPN 3000 Software Version

3.6

4.0

4.1

4.7

3.5

VPN 3000 Model

Concentrator models

Features & Tasks

Client supplied

VPN Protocols

Point-to-Point Tunneling Protocol (PPTP)

Layer 2 Tunneling Protocol (L2TP)