AAA network mask when assigning per user ip address

[hugo.picado]

Hello, I want to know if I can set network mask when I use ACS to assign the ip address. I have had some problems when I use split tunnel since the computer (the client side) routes are sending packages with the ip address assigned by the ACS intead of the local. So the user cannot really reach the full local network resources.

I am managing the problem assigning address from my ASA, but I guess this is not the best way to doing, specially because my company has a HelpDesk Deparment in charge of setting up customer access.

Please help me

[Erick Delgado]

Hi Hugo,

Assign a network mask with ACS it is possible using the attribute IETF_RADIUS_Attributes_Framed-IP-Netmask.

This need to be customize on the ACS.

Please see link below.

http://tinyurl.com/qjveqo

If you have any doubt let me know

Thanks,