Can a concentrator use the client's original IP address?

[jm9393]

I have a customer with a requirement to encrypt traffic on their private network for one specific application. I can use split tunneling to segregate the traffic we want encrypted, but they do not want a different IP address (from a pool) assigned to the PC on the tunnel for audit purposes.

Can a VPN concentrator be configured to use the client's original IP address instead of an address from a pool?

[aacole]

Hi, there is an option under Configuration\System\Address Management\Assignment to use the client supplied IP address, but the documentation indictates that this is not allowed with IPSec. It may work if you use PPTP.

How about setting up an IP address under the user name, that way you always assign the same address.

The manual that describes the address assignment is here:

http://www.cisco.com/en/US/partner/products/hw/vpndevc/ps2284/products_configuration_guide_chapter09186a00801f1c82.html#1000340

Andy