VPNGROUP and IP Allocation

[hschlecht]

I have an PIX in 6.3.3 version on which I have configured the vpngroup function for my remote users.

I allocate IP address through an ip local pool that I use with the vpngroup remote_urs_grp address-pool sub

If I would allocate 1 adress per user I need create I vpngroup per user and on ip pool per user.

If I have an ACS server can I create IP pool on the ACS server and allocate the ip pool in the user defintion, so the user receive the Ip address when they authenticate on the ACS server ?

[gfullage]

This feature is currently not available (although has been asked for quite a bit, so hopefully in a future release). Currently the only way to assign users a specific address is to create a specific group with an IP address pool with one address in it. I know this is not scalable, but it's the only way at the moment.

If you really want this feature, please have your Account Mgr or SE add in a feature enhancement for it, the more people that ask for it the more likely it'll get added quicker.