I have a question. I have a client that VPN into our network. When he logs in he is assigned an ip address out of the VPN POOL. Is there a way to assign a static IP to his VPN client so when he logins into the VPN his static IP will work. There is an IP address in the VPN POOL that I want to assign him. I don’t want to make a special VPN. Thanks.
My problem is that I have over 100 users that may need static IP address and it looks like i'll have to add each user in the local user area and assign them a static ip. I didn't know if there was a way to have the enduser computer to have a static IP and when they connect to the VPN Pool it would know in the IP Pool in the ASDM not to use the static IP that was assign. Hope this makes sense. THanks.
Actually I did not understand your last statement:
.." I didn't know if there was a way to have the enduser computer to have a static IP and when they connect to the VPN Pool it would know in the IP Pool in the ASDM not to use the static IP that was assign.."
If you want the ASA to assign static IP address and the authentication is local this is the only way to do it....if you use an ACS to authenticate the users I believe there is a way to inject the IP address by using RADIUS.
Sorry about that. I had people talking to me as I was typing.
I have around 100 users with laptops. Currently they VPN and is assigned an IP address in the address pool. Instead of making 100 local users and assign them a static IP in the ASDM, is there a way on the VPN client to assign an static IP address and still keep the address pool?
Actually with the configuration sample I sent you, only the users you configure with the parameter "vpn-framed-ip-address" will use that static IP address...the rest of them shoud use the other IPs from the assigned pool to the VPN tunnel group.
Table of ContentsIntroductionVersion HistoryPossible Future
UpdatesDocuments PurposeNAT Operation in ASA 8.3+ SectionsRule Types
Network Object NATTwice NAT / Manual NATRule Types used per SectionNAT
Types used with Twice NAT / Manual NAT and Network Obje...
Table of Contents Introduction:This document describes details on how
NAT-T works. Background: ESP encrypts all critical information,
encapsulating the entire inner TCP/UDP datagram within an ESP header.
ESP is an IP protocol in the same sense that TCP an...