What you are trying to do is possible. 1. for static ip per username - Under User setup, IP Assignment, select static address and type in the address. for more info. pl. see:http://www.cisco.com/univercd/cc/td/doc/product/access/acs_soft/csacs4nt/ac...

http://www.cisco.com/warp/customer/480/16.htmlhas exactly the solution that you are looking for.

See this config sample:http://www.cisco.com/warp/customer/110/39.htmlhope this helps,Vijay.

AH and NAT by definition cause trouble. You should try changing transform proposal to ESP (eliminate AH).Vijay

I don't know if anyone specifically tested this combination. But the best way to check what's going on is to see what the logs of HIDS have to say - i.e.,to see if any specific services / actions are prevented - and if so create exceptions in HIDS (a...