2821 - "ip local pool webvpn-pool" command - tftp server option for ssl vpn

[istvan.kelemen1]

Hio All,

Is it possible to use a dhcp server for the SSL VPN users?

With "ip local pool webvpn-pool" command I can only specify the range.

I wanna run Cisco Communicator on the VPN user's laptop, it needs TFTP option 150.

Thx!

[Richard Burts]

I have been looking into this and find it an interesting challenge. I do not have a complete answer for you but here is what I do have so far.

- if you use the ip local pool command then IOS is going to expect IP address ranges. And if you want to use DHCP then you really do not want a local pool. (by definition that DHCP server is not local)

- so we need to look at a different way to assign addresses for the Remote Access VPN sessions.

- I have seen some references to using DHCP server in configuring Remote Access VPN on ASA firewalls, but have not found much about using DHCP for IOS.

- I did find this reference that talks about DHCP used by Easy VPN server for IOS. Not sure if this is what you are looking for

http://www.cisco.com/c/en/us/td/docs/ios-xml/ios/sec_conn_esyvpn/configuration/12-4t/sec-easy-vpn-12-4t-book.pdf

 - I found several references in IOS configuration docs that talk about a requirement that the address pool used for Remote Access VPN be in a subnet associated with an interface on the router. Not sure what the implications of that are for using DHCP.

HTH

Rick

[istvan.kelemen1]

Thanks for your answer. I am using different class C network than the inside interface, it was suggested by IOS. I think it would work with the same subnet as the inside interface but it wouldn't let me set the option 150 anywas...