Per-user NAT IP assignment. Please help!!

[antarias]

Hello all,

I posted this in AAA, no answer at the moment. I'm in need of your help :

I need to perform a per-user NAT translation and can't figure out if this can be accomplished with PIX and ACS :

When an authenticated user gets access to my inside network, I need to perform NAT to assign each one an specified IP address, maybe storing the address in each user or group profile in ACS.

This is because of requirements of a web application inside the firewall, which performs authentication based on IP -no way to change this app.

Any suggestions, on whether this can be accomplished or definitely not, would be very appreciated.

Thanks a lot.

A. Arias.

[3gleister]

If you're saying that you need to allow these internal users to get to the internet using a specific IP rather than a Global NAT? If so , just put in static commands, and each time that inside user gets their address assigned, they will get the same outside IP . "static (inside,outside) 4.4.4.4 10.10.10.1," etc