12-20-2004 06:06 PM - edited 02-21-2020 01:30 PM
I use cisco vpn client connected to 2621 router with c2600-ik8s-mz.122-15.T9.bin.
Each time vpn client get different ip address after connected to router. But my application need static assigned ip address.
So how to do ?
any comments is appreciated! thanks
router's config is like this:
crypto isakmp policy 3
hash md5
authentication pre-share
group 2
!
crypto isakmp client configuration group 3000client
key xxxx
dns 10.1.64.100
wins 10.1.64.100
domain cisco.com
pool ippool
!
!
crypto ipsec transform-set myset esp-null esp-sha-hmac
crypto dynamic-map dynmap 10
set transform-set myset
reverse-route
!
!
crypto map clientmap isakmp authorization list groupauthor
crypto map clientmap client configuration address respond
crypto map clientmap 10 ipsec-isakmp dynamic dynmap
ip local pool ippool 10.1.64.1 10.1.64.2
12-24-2004 11:14 AM
If your requirement is for only one client, configure only one IP address in the pool.
12-28-2004 12:29 AM
thanks for your reply.
12-28-2004 02:21 AM
Hi Henry,
Yes, as suggested we cn have jus one IP in the pool.But this is not always possible s we may hve mant other VPN clients which wnt to connect .Still we may configure one pool with many ip while pool b with jus one IP & map it with that VPN group.
>> We can also consider using AAA server for the same.The Radius server can autheticate with that particular vpn user & is capable to giving a specific ip.
Hope this helps.
Adi
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide