Cisco Support Community
cancel
Showing results for 
Search instead for 
Did you mean: 
Announcements

Welcome to Cisco Support Community. We would love to have your feedback.

For an introduction to the new site, click here. And see here for current known issues.

New Member

VPNClient to PIX, IP from TACACS?

Hi,

1. is it possible configure the PIX as a VPN-Concentrator but the VPN-Clients should get there IP addresses not from a local pool, the TACACS server authenticating the clients should give the IPs or is there another way give the IP depending on the user?

2. is accounting for VPN-Clients possible?

Thank a lot

André

1 REPLY
Cisco Employee

Re: VPNClient to PIX, IP from TACACS?

Short answer, no and no.

Longer answer, the PIX will only assign VPN IP addresses out of a local pool. The only way to assign a specifi user a specific address is to create a separate group for that user, with a separate IP pool and only put the one IP address in that pool. Ugly I know, but currently it's the only way.

Accounting for VPN clients is coming in v7.0, due out later on this year.

224
Views
0
Helpful
1
Replies
CreatePlease to create content