08-13-2011 11:21 PM
hi all,
i am trying to configure static ip on remote client user side , i am using the following doc as an example but i am not getting the ip which i am mentiong in the user .
http://www.cisco.com/en/US/products/ps6120/products_configuration_example09186a0080a7afb2.shtml
my asa version is 8.2(1)
thanks
cyril
Solved! Go to Solution.
08-17-2011 01:10 PM
Great to hear. Pls kindly mark the post as answered so others can learn from your post. Thanks..
08-14-2011 01:10 AM
What authentication method are you using for your vpn client? via ASA local database, or via an external authentication server?
Pls also share a copy of the config to check.
08-14-2011 06:49 AM
hi jennifer,
i am using local user database only
i am having exactly the same configuration which is there in that link.
08-14-2011 04:59 PM
if you are having exactly the same configuration, I really don't see a reason why it wouldn't work.
One thing to check is your global ip pool does not overlap with the ip address that you statically assign to your vpn user.
08-14-2011 10:16 PM
08-14-2011 10:37 PM
Configuration looks absolutely perfect.
Can you please try to connect and send through the following debug output:
debug cry isa
debug cry ipsec
And also advise which username you are trying to connect with and what ip address you are getting allocated when connected via vpn. Thanks.
08-15-2011 06:08 AM
Hi Cyril,
Have you tried to add te command "vpn-addr-assign local"? (Per doc the 'show run' does not show this commnad).
Thx
MS
08-15-2011 08:05 AM
08-16-2011 05:02 AM
Yeah, doesn't look like the user attributes of the static ip address is getting used, but the ip address from the global pool is assigned.
I would upgrade the ASA to the latest version of 8.2.x to see if this resolves the issue. Otherwise, if you would like to troubleshoot this further, I would suggest opening a TAC case.
08-17-2011 07:41 AM
hi jenni,
i got the solution.. i upgraded the asa to 8.2(5) then also the same the i change the command from
no vpn-addr-assign aaa to vpn-addr-assign aaa
then started working
thanks for ur help
cyril
08-17-2011 01:10 PM
Great to hear. Pls kindly mark the post as answered so others can learn from your post. Thanks..
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide