IP Address Allocation from DHCP Server For SSL Anyconnect VPN

[Jain Raj]

Guys,

I have configured a SSL Anyconnect vpn in my ASA 5545 and setup a local IP pool for VPN users. My client is asking a new requirement like the IP address to the remote users should be assigned from DHCP and not from local pool for tracking purpose.

Please help me to fix this. What is the commands required.

Thanks

[Karsten Iwen]

The config look like the following:

no vpn-addr-assign aaa
no vpn-addr-assign local
vpn-addr-assign dhcp  ! should be default, unless disabled
!
group-policy MyGroup-Policy attributes
  dhcp-network-scope 10.10.10.0
!
tunnel-group MyTunnel-Group general-attributes
  dhcp-server 10.0.1.100

http://www.cisco.com/c/en/us/td/docs/security/asa/asa90/configuration/guide/asa_90_cli_config/vpn_addresses.html#pgfId-999516

[Jain Raj]

Dear ,

I have configured the SSL VPN and now it is accessible from all places.

But my concern is , When someone is trying to connect the SSL VPN while sitting inside the client network it should not. The users can connect SSL vpn only if they are outside the client network. How to do it.

Regards,

Jain Raj