VPN policy - to assign dedicated IP in FDM

[zufayri]

Hi Cisco community,

As we configured VPN manually from ASA to FDM, we notice there is some function from ASA that the local vpn user can assigned dedicated IP as per below. I find it at FDM local user setting only can put username and password. Is it possible to do it on FDM or this is a features that need to be with FMC?

[Rob Ingram]

@zufayri FDM is rather featureless and does not have many advanced options to assign a static IP address and even there is no native in-built functionality in FMC to assign a static IP address per user either afaik.

However you can use a RADIUS server and push down a static IP address to the client using "Framed-IP-Address" attribute.

[zufayri]

Hi Rob,

Thanks for the answer. but from our customer side they only use radius server for their Staff and other than that need to configure in local FTD and assign the IP for them to access different internal segment. so from our perspective, they dont agree to do it as current ASA manage to configured it. Is there any other workaround or solution for this?

[Rob Ingram]

@zufayri reimage the device to use latest ASA image instead of FDM.

[zufayri]

reimage need to buy another license for ASA license right? Seem like there will be no license conversion from FTD to ASA