PIX 515 e and Radius assing static IP

[fmartin]

Hello

I have a Cisco PIX 515e (software v. 6.3(4)), and Windows 2000 with WinRadius, providing authentication for incoming VPN connections, This works well for general users.

However, I have a group of users who need to be assigned static IPs when they VPN into the network. Can I do with WinRadius or Windows IAS 2003 and the Cisco PIX 515e?.

Thanks

Raul

[aacole]

Raul, The only way that I know how to do this with a radius server is to use Cisco ACS, you can tie in an IP address to the user login details.

With W2k IAS you could do it by assigning a unique username, password (IKE key) and address pool having one address under the vpngroup settings. This would be ok for a small number of users, but gets unmanagable as the number of users grow.

I've not used w2k3 IAS, so no comment there!

Andy