cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
2405
Views
0
Helpful
5
Replies

use static IP for each identity of ISE

Snika
Enthusiast
Enthusiast

The AAA server for ASA Remote VPN is ISE.

The DHCP server is the ASA.

I want to use static IP of some identity of ISE.

Is there a good way??

1 Accepted Solution

Accepted Solutions

Aref Alsouqi
Collaborator
Collaborator

I've never done this before and did not come across any documentation that would suggest it. Would be interesting to know if that is possible.

View solution in original post

5 Replies 5

Aref Alsouqi
Collaborator
Collaborator

I've never done this before and did not come across any documentation that would suggest it. Would be interesting to know if that is possible.

Aref Alsouqi
Collaborator
Collaborator

I did not try this yet but had a quick read the other day, try please to use the RADIUS attribute Framed-IP-Address, that would work in your case as you are using the ASA to assign the clients an IP addresses.

Mohammed al Baqari
VIP Advisor VIP Advisor
VIP Advisor
Hi,

I am using it with ISE attributes. The assigned IP from Radius (ISE)
override the IP assigned from DHCP/IP Pool. Create an authorization policy
that matches user identity and assign a profile that have the following
assigned in Advanced Attributes Settings:

Framed-IP-Address
Framed-IP-Netmask

***** please remember to rate useful posts

Can you show your setting information as a capture??

hariholla
Cisco Employee
Cisco Employee

Can you explain more on why you need this?

-Hari

Getting Started

Find answers to your questions by entering keywords or phrases in the Search bar above. New here? Use these resources to familiarize yourself with the community:

Recognize Your Peers