ASA 5510 Client Static IP

[Donald St. Croix]

I have a ASA 5510 that uses Radius for Authentication.  What I am trying to do is assign each user that logs into VPN to have a specfic static IP based on userid.  I have about 30 to 50 users.  I don't want to complicate this by having them select a different profile when logging into the ASA.  What is a clean and simply way to assign user static ip and not use local database for login?

[mirober2]

Hi Donald,

Assuming you are using ACS as your RADIUS server, you can set the static IP address in the "Assign static IP address" field in the user's account settings. You would then create a group-policy of type "external" to be used by all your VPN users. The ASA will send the username to ACS during Xauth and ACS will return the IP address to be assigned to the client.

Hope that helps.

-Mike