02-17-2014 03:22 PM - edited 03-10-2019 09:24 PM
Dear friends,
I have observed that Cisco ISE Virtual Appliance (VMware) can act as a RADIUS server in the same manner as ACS does, but I cannot find the way of assigning an IP address to a remote VPN client (only assigning a VLAN).
At this point I don't know if it is strictly necessary to have the IP address assignment for the remote VPN clients done in the external firewall (i. e. Cisco ASA) in this case.
Is there any way of defining an IP address pool in the ISE itself for VPN clients authenticated against that ISE?
If the answer is not, which ones could be the options for that assignment other than the ASA pool assignment? Could it be possible defining the corresponding address pool in an internal DHCP server that could provide the IP address to the VPN client after successful authentication through ISE?
Any help would be really appreciated to clarifying these questions.
Thank you and best regards.
02-20-2014 05:44 AM
Please find the link below for the may help you to get the answer related to comparision and even for deployment.
http://pmbuwiki.cisco.com/Products/ISE/Technical/Design-Config/Guest_and_Web_Portal_Services
02-20-2014 03:21 PM
Thank you for your response Basant, but I cannot access that document.
Page does not load and I suppose that pmbuwiki.cisco.com is something like an internal Cisco resource center.
Could you provide me with that document in a PDF format?
Best regards.
02-20-2014 11:32 PM
Please refer
03-18-2014 09:45 AM
https://supportforums.cisco.com/discussion/11923261/assign-static-ip-address-asa-vpn-clients-ise
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide