Assign static IP Address to user

[christoulakis]

Hello,

How can we assign to an authorized user a specific IP address.

The concept is that is a unique user that is not always in house, so in order to avoid to create another dhcp pool on the DC only for him i prefer ISE to push him an IP address when he tries to login.

Thanks

[nspasov]

Take a look at the following thread. It is centered around VPNs but a lot of it would apply to other implementation scenarios as well (wired, wireless, etc)

https://supportforums.cisco.com/discussion/11923261/assign-static-ip-address-asa-vpn-clients-ise

Thank you for rating helpful posts!

[rchockeelopez]

Hi, 

This is the topology.

Users are connecting via AnyConnect VPN and are getting authorized with ISE and AD. Windows DHCP Server is giving dynamically IP addreses. The customer wants to assign static MAC-IP binding in the DHCP Server so they can use the firewall to filter based on the VPN IP addresses.

Internet  ----- ASA ------ LAN --- ISE and Windows DHCP Server.

Can you provide more information how can I assign MAC-IP binding in a Windows DHCP Server through AnyConnect VPN and ISE.

Thanks.