topic ASA 5510 Client Static IP in Network Security

ASA 5510 Client Static IP

Donald St. Croix — Fri, 21 Feb 2020 12:28:19 GMT

I have a ASA 5510 that uses Radius for Authentication. What I am trying to do is assign each user that logs into VPN to have a specfic static IP based on userid. I have about 30 to 50 users. I don't want to complicate this by having them select a different profile when logging into the ASA. What is a clean and simply way to assign user static ip and not use local database for login?

ASA 5510 Client Static IP

mirober2 — Sat, 01 Oct 2011 17:50:52 GMT

Hi Donald,

Assuming you are using ACS as your RADIUS server, you can set the static IP address in the "Assign static IP address" field in the user's account settings. You would then create a group-policy of type "external" to be used by all your VPN users. The ASA will send the username to ACS during Xauth and ACS will return the IP address to be assigned to the client.

Hope that helps.

-Mike