Pix 525 with VPN client how to use IP pool from ACS

[mlheureux]

I am able to use my pix to assign ip address to vpn client with command

isakmp client configuration address-pool local vpnclientIpPool outside or

vpngroup XXX address pool XXX .

But how do you use the ACS IP pool server? If you remove the previous command from the pix it doesn`t work.

Christian Heroux

[Nairi Adamian]

There is no option on the pix to assign address from ACS pool, only local pool can be used.

Hope this helps,

-Nairi

[mlheureux]

Thanks a lot Nairi !

I have been fighting with that option in my lab for a while. There are any other function that would work?

I will try in my lab to use the ACS to specify which aaa client local pool to use in my client. I was also planning to try the static IP address. Should they work with the pix and vpn architecture?

In a user configuration There is an option "Client IP Address Assignment ->Assigned by AAA client pool XXXX" and also another field "Assign static IP address XXXX"

Christian Heroux

[Nairi Adamian]

The pix can only assign address to vpn client using the local pool on the pix iteself.

The options for pool on the ACS server can be used in other cases for example dialing in to a router.

hope this helps

-Nairi