cancel
Showing results for 
Search instead for 
Did you mean: 
cancel
254
Views
0
Helpful
1
Replies

chang vpn client ip from pix local pool ip to ACS_NT static IP

emily
Level 1
Level 1

Hi All

For more flexible design , i would like to chang vpn client ip from pix local ip pool to ACS_NT static ip , i delete " isakmp client configuration address-pool local ippool outside " and creat ip pool ranger 10.1.1.1-10.1.1.254 in ACS vpn client Group, but i still failed , Could anyone give me relation document

Best Regard

1 Reply 1

gfullage
Cisco Employee
Cisco Employee

This is not supported at the moment, the pool of addresses has to be local to the PIX.

To allocate addresses from a remote pool would require Accounting functionality, otherwise the PIX and ACS server would never know when to free an address from the pool. Since VPN accounting is not supported, non-local address pools are also not supported.