cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
Announcements

This community is for technical, feature, configuration and deployment questions.
For production deployment issues, please contact the TAC! We will not comment or assist with your TAC case in these forums.
Please see How to Ask the Community for Help for other best practices.

1060
Views
0
Helpful
5
Replies
Highlighted
Participant

use static IP for each identity of ISE

The AAA server for ASA Remote VPN is ISE.

The DHCP server is the ASA.

I want to use static IP of some identity of ISE.

Is there a good way??

1 ACCEPTED SOLUTION

Accepted Solutions
Highlighted
VIP Rising star

I've never done this before and did not come across any documentation that would suggest it. Would be interesting to know if that is possible.

View solution in original post

5 REPLIES 5
Highlighted
VIP Rising star

I've never done this before and did not come across any documentation that would suggest it. Would be interesting to know if that is possible.

View solution in original post

Highlighted
VIP Rising star

I did not try this yet but had a quick read the other day, try please to use the RADIUS attribute Framed-IP-Address, that would work in your case as you are using the ASA to assign the clients an IP addresses.

Highlighted
VIP Advisor

Hi,

I am using it with ISE attributes. The assigned IP from Radius (ISE)
override the IP assigned from DHCP/IP Pool. Create an authorization policy
that matches user identity and assign a profile that have the following
assigned in Advanced Attributes Settings:

Framed-IP-Address
Framed-IP-Netmask

***** please remember to rate useful posts
Highlighted

Can you show your setting information as a capture??

Highlighted
Cisco Employee

Can you explain more on why you need this?

-Hari

Content for Community-Ad