Cisco Support Community
Showing results for 
Search instead for 
Did you mean: 

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

Same tunnel group, but different dhcp scope

hello,  my manager wants to have users connecting via mobile devices to be assigned an ip address from a different subnet than other "normal" users.  the only way that i know how to do this is with an ldap mapping of an AD group to a separate group policy.  however, my manager does want to do that, as we would have to make everyone a member of that group, and that would pose a conflict with the other vpn AD group we have for everyone to connect to the ASA.  so, my question is this:  is there any other way to identify which OS the connection is using, and then assign a separate group policy?  perhaps in the DAP?  what are some alternatives?  thanks.

CreatePlease login to create content