I've assigned a user one static IP address from a pool, 172.30.95.133. I also have this pool on the same group (172.30.95.129-172.30.95.254). Somehow, Cisco 3030 (v.3.6.3) assigns 172.30.95.129 to this user (VPN Client v.3.6). What event class I can use to debug this? (IP, DHCP, etc.)
Yes, I have that option checked. There are several dozens of users in this group, with static IP addresses. Most of them received the correct static IP address. Only a few somehow were assigned static IP address but received the IP from the pool. Don't know why there are differences - want to find out.
It may be a more basic issue. In a router configuration if you have a dynamic pool and you want to also have statically assigned addresses for certain hosts it is necessary to deny that particular host(s) from the dynamic pool. Also you would want to not include the address in the pool.
access-list 1 deny 10.0.0.1
access-list 1 permit any
ip nat inside source static 10.0.0.1 126.96.36.199
ip nat pool pool188.8.131.52 10.0.0.254 netmask 255.255.255.0
ip nat inside source list 1 pool pool7
Otherwise there may be issues where a different host is assigned the address out of the dynamic pool and you will receive a different address as the static is not available.
Given that is true on the router platform it may be an issue in how you define the pools in the concentrator. I am assuming that the static pool and the dynamic pools are defined seperately and you need to ensure they do not overlap.
I do not have a lot of experience with the concentrators but I have seen this as a similar issue.
You are correct that the pool and static addresses need/should be different. I was assuming that the environment would behave similar to DHCP. In DHCP, if you have a static IP on your client, you will use that IP address. If DHCP server reserves an IP address (based on your MAC address), you will get the reserved IP address. Otherwise, you will get an address from the pool. But Cisco VPN concentrator seems to behave differently. I've separated the dynamic pool and static pool. But still curious how would I debug it?
Login to the FXOS chassis manager.
Direct your browser to https://hostname/, and log-in using the user-name and password.
Go to Help > About and check the current version:
Check the current version availa...
We have configured the outside and inside Interface with official ipv6 adresses, set a default route on outside Interface to our router, we also have definied a rule , which also gets hits, to permit tcp from inside Interface to any6.
In Syslog I also se...