Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 

How to assign static IP addresses to VPN Clients

 

Introduction:

This dcoument describes the process to assign STATIC IP Addresses to VPN Clients.

 

Two types of IP's:

  • Dynamic IP Addresses:Dynamic IP can be defined as an IP address which changes every time the device logs in to a network. To trace such IP address is very tough.
  • Static IP Addresses:A static IP can be defined as an IP address which is manually configured on a device.A static IP address is known "static" because it does not change.

Resolution

In this example, three groups are created, each with its own pool and with just one IP address. The inside network is 192.168.1.0/24:

ip local pool group1 172.16.99.1
ip local pool group2 172.16.99.2
ip local pool group3 172.16.99.3


access-list nonat permit ip 192.168.1.0 255.255.255.0 172.16.99.0 255.255.255.0

crypto ipsec transform-set myset esp-3des esp-md5-hmac
crypto dynamic-map dynmap 10 set transform-set myset
crypto map mymap 99 ipsec-isakmp dynamic dynmap
crypto map mymap interface outside

sysopt connection permit ipsec

isakmp nat-trav
isakmp identity address
isakmp keepalive 10 2

isakmp enable outside

isakmp policy 1 authentication pre-share
isakmp policy 1 encryption 3des
isakmp policy 1 hash md5
isakmp policy 1 group 2
isakmp policy 1 lifetime 86400

(the actual vpn groups):

vpngroup group1 password MYPASSWORD
vpngroup group1 address-pool group1
vpngroup group1 dns 192.168.1.5
vpngroup group1 wins 192.168.1.5

vpngroup group2 password MYPASSWORD
vpngroup group2 address-pool group2
vpngroup group2 dns 192.168.1.5
vpngroup group2 wins 192.168.1.5

vpngroup group3 password MYPASSWORD
vpngroup group3 address-pool group3
vpngroup group3 dns 192.168.1.5
vpngroup group3 wins 192.168.1.5

wr mem

 

You may add as many VPN groups as you wish. Each group must contain a password and an address pool. The Domain Name System (DNS) and Windows Internet Naming Service (WINS) statements are optional.

 

Problem Type

How to (General Information)

 

Product Family

Firewall - PIX 500 series

VPN - hardware & software clients

PIX Software Version

PIX version 6.x

PIX version 5.x

VPN Client Software Version

Cisco VPN Client

 

VPN Tunnel End Points

Client

PIX

Features & Tasks

Local address pool

 

VPN Protocols

IPSec

9537
Views
0
Helpful
0
Comments