This dcoument describes the process to assign STATIC IP Addresses to VPN Clients.
Two types of IP's:
In this example, three groups are created, each with its own pool and with just one IP address. The inside network is 192.168.1.0/24:
ip local pool group1 172.16.99.1ip local pool group2 172.16.99.2ip local pool group3 172.16.99.3access-list nonat permit ip 192.168.1.0 255.255.255.0 172.16.99.0 255.255.255.0crypto ipsec transform-set myset esp-3des esp-md5-hmaccrypto dynamic-map dynmap 10 set transform-set mysetcrypto map mymap 99 ipsec-isakmp dynamic dynmapcrypto map mymap interface outsidesysopt connection permit ipsecisakmp nat-travisakmp identity addressisakmp keepalive 10 2isakmp enable outsideisakmp policy 1 authentication pre-shareisakmp policy 1 encryption 3desisakmp policy 1 hash md5isakmp policy 1 group 2isakmp policy 1 lifetime 86400(the actual vpn groups):vpngroup group1 password MYPASSWORDvpngroup group1 address-pool group1vpngroup group1 dns 192.168.1.5vpngroup group1 wins 192.168.1.5vpngroup group2 password MYPASSWORDvpngroup group2 address-pool group2vpngroup group2 dns 192.168.1.5vpngroup group2 wins 192.168.1.5vpngroup group3 password MYPASSWORDvpngroup group3 address-pool group3vpngroup group3 dns 192.168.1.5vpngroup group3 wins 192.168.1.5wr mem
You may add as many VPN groups as you wish. Each group must contain a password and an address pool. The Domain Name System (DNS) and Windows Internet Naming Service (WINS) statements are optional.
How to (General Information)
Firewall - PIX 500 series
VPN - hardware & software clients
PIX version 6.x
PIX version 5.x
Cisco VPN Client
Local address pool