PIX and DHCP

[3mrivera]

.

We have multiple wirleless segments behind PIX firewalls and would like our mobile VPN users to utilize DHCP assigned addresses rather than have to manage static IP addresses and to minimize exposure and harware we would like the PIX to handle the assignment of IP addresses.

Is anyone aware of any future plans for PIX to support DHCP on the OUTSIDE interface and/or multiple interfaces?

.

[steve.barlow]

Not exactly what you were looking for but an alternative.

Both the vpngroup address-pool command and the ip local pool command enable you to specify a pool of local addresses to be used for assigning dynamic ip addresses to remote VPN clients.

eg:

ip local pool test 192.168.1.1-192.168.1.25

vpngroup vpn3000 address-pool test

vpngroup vpn3000 dns-server 10.2.2.2

vpngroup vpn3000 wins-server 10.2.2.2

vpngroup vpn3000 default-domain cisco.com

vpngroup vpn3000 idle-time 1800

vpngroup vpn3000 password ********

Steve