topic Re: Wireless and VPN user - IP Pools in Network Access Control

Wireless and VPN user - IP Pools

rodom — Sun, 10 Mar 2019 20:54:06 GMT

When my user comes in wireless, he shouldn't be issued an IP address from the server pool, but if he comes in on the VPN or DIAL, he should be issued an address.

I cannot determine a way to do this if the user uses the same logon regardless of the access method.

Is there a way to separate out when to use IP Pools based on what access the user is using?

Re: Wireless and VPN user - IP Pools

scottmac — Tue, 23 Nov 2004 15:27:55 GMT

What flavor of RADIUS or ACS are you using?

You should be able to configure it according to the traffic-type description, group, or NAS.

Good Luck

Scott

Re: Wireless and VPN user - IP Pools

rodom — Tue, 23 Nov 2004 16:25:20 GMT

Running ACS 3.3.2.2

Wireless is Radius Aironet

VPN is Radius IETF

Dial is Radius IOS/PIX

How can the traffic type be used to determine whether or not a group/user uses the IP Pools or not?

Re: Wireless and VPN user - IP Pools

scottosan — Wed, 24 Nov 2004 16:04:30 GMT

For corporate wireless, we just let the same wired DHCP server control IP's. As for the Guest wireless, their gateway is actually the spare interface on the PIX. We use the PIX to assigne IP on that interface.