Static IPs for VPN Clients?

[jack]

Hi everyone,

I have what is probably a pretty easy question.

I've got a remote SR 520 router connecting to my ASA via the routers built-in VPN client. The ASA uses my local DC to assign it an IP address via DHCP.

I'd like to know whether it's possible to give the router a static IP address for the VPN session. I suppose I could set up a DHCP reservation on my DC to do this, but there must be a cleaner way.

Thanks!

[jack]

I was able to do this by creating an address pool of one address for the IPSec connection profile that the router is using.

If anyone has a suggestion on a better way to accomplish this goal, please chime in

Thanks!

[m.kafka]

If you use XAUTH (username/password) for your easy-vpn there is an option on the vpn server:

username [name] attributes

allows to set a couple of vpn-attributes per user, e.g.:

vpn-framed-ip-address

lets you specify the IP address and mask assigned to that client.

Use the command-lookup tool for more information on "username attributes"

rgds,

MiKa