Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

How to assign static IP addresses to VPN Clients



This dcoument describes the process to assign STATIC IP Addresses to VPN Clients.


Two types of IP's:

  • Dynamic IP Addresses:Dynamic IP can be defined as an IP address which changes every time the device logs in to a network. To trace such IP address is very tough.
  • Static IP Addresses:A static IP can be defined as an IP address which is manually configured on a device.A static IP address is known "static" because it does not change.


In this example, three groups are created, each with its own pool and with just one IP address. The inside network is

ip local pool group1
ip local pool group2
ip local pool group3

access-list nonat permit ip

crypto ipsec transform-set myset esp-3des esp-md5-hmac
crypto dynamic-map dynmap 10 set transform-set myset
crypto map mymap 99 ipsec-isakmp dynamic dynmap
crypto map mymap interface outside

sysopt connection permit ipsec

isakmp nat-trav
isakmp identity address
isakmp keepalive 10 2

isakmp enable outside

isakmp policy 1 authentication pre-share
isakmp policy 1 encryption 3des
isakmp policy 1 hash md5
isakmp policy 1 group 2
isakmp policy 1 lifetime 86400

(the actual vpn groups):

vpngroup group1 password MYPASSWORD
vpngroup group1 address-pool group1
vpngroup group1 dns
vpngroup group1 wins

vpngroup group2 password MYPASSWORD
vpngroup group2 address-pool group2
vpngroup group2 dns
vpngroup group2 wins

vpngroup group3 password MYPASSWORD
vpngroup group3 address-pool group3
vpngroup group3 dns
vpngroup group3 wins

wr mem


You may add as many VPN groups as you wish. Each group must contain a password and an address pool. The Domain Name System (DNS) and Windows Internet Naming Service (WINS) statements are optional.


Problem Type

How to (General Information)


Product Family

Firewall - PIX 500 series

VPN - hardware & software clients

PIX Software Version

PIX version 6.x

PIX version 5.x

VPN Client Software Version

Cisco VPN Client


VPN Tunnel End Points



Features & Tasks

Local address pool


VPN Protocols