11-09-2009 08:49 PM
Experts,
I have Cisco ASA5510 and am trying to configure static ip for client vpn user with username HarryM01Iphone. The client can authenticate correctly but he is always getting IP from the VPN pool as the rest of the users eventhough he suppose to get a static ip based on framed-ip configuration.
I have attached the configs and firewall version.
I followed example as per http://www-europe.cisco.com/application/pdf/paws/109639/asa-vpn-static-asdm-config.pdf
Hope someone can shed some light.
11-10-2009 04:54 AM
Do you have "vpn-addr-assign aaa" configured?
11-10-2009 06:12 PM
I have this lines on the firewall:
no vpn-addr-assign aaa
no vpn-addr-assign dhcp
11-10-2009 08:57 PM
There seems to be an error in the doc you quoted. "vpn-addr-assign local" only refers to the local pool, if you want to use per-user attributes (even if they are defined locally) this is considered AAA (i.e. the attributes come from the local AAA server).
So please configure "vpn-addr-assign aaa", and you should be all set.
Discover and save your favorite ideas. Come back to expert answers, step-by-step guides, recent topics, and more.
New here? Get started with these tips. How to use Community New member guide