09-28-2017 07:47 PM - edited 03-12-2019 04:34 AM
hey , as the subject, i want to assign a static IP to a specific vpn client. so everytime the user account dial in the ASA, will got the same VPN IP. i am using l2tp over ipsec vpn, and integrated with windows NPS server (as aaa server). below is my configuration:
ip local pool xhdcvpn_addr 10.25.0.2-10.25.3.253 mask 255.255.252.0
nat (inside,outside) source static all_outside all_outside destination static xhdcvpn xhdcvpn
nat (outside,outside) after-auto source dynamic xhdcvpn interface
aaa-server NPS protocol radius
aaa-server NPS (inside) host 10.20.0.10
key *****
crypto ipsec ikev1 transform-set xhdcvpn_trans esp-aes esp-sha-hmac
crypto ipsec ikev1 transform-set xhdcvpn_trans mode transport
crypto ipsec security-association pmtu-aging infinite
crypto dynamic-map xhdcvpn_dyn 1 set ikev1 transform-set xhdcvpn_trans
crypto map xhdcvpn 1 ipsec-isakmp dynamic xhdcvpn_dyn
crypto map xhdcvpn interface outside
crypto ca trustpool policy
crypto isakmp nat-traversal 1500
crypto ikev1 enable outside
crypto ikev1 policy 1
authentication pre-share
encryption 3des
hash sha
group 2
lifetime 86400
group-policy xhdcvpn_policy internal
group-policy xhdcvpn_policy attributes
dns-server value 10.20.0.10
vpn-tunnel-protocol l2tp-ipsec
split-tunnel-policy tunnelall
dynamic-access-policy-record DfltAccessPolicy
tunnel-group DefaultRAGroup general-attributes
address-pool xhdcvpn_addr
authentication-server-group NPS
default-group-policy xhdcvpn_policy
password-management
tunnel-group DefaultRAGroup ipsec-attributes
ikev1 pre-shared-key *****
tunnel-group DefaultRAGroup ppp-attributes
authentication pap
authentication ms-chap-v2
###############################################
if I have a domain account xxx@domain.com , i want that account dial in and get the same IP every time. or do i need to create a vpn user account on ASA the achieve that? how ?
thanks!!!
09-29-2017 04:47 AM
You should be able to do that by using an LDAP attribute map. The details on setting it up can be found here:
You may also find this thread useful:
09-29-2017 10:01 AM
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide