Unable to assign separate local IP Pools to RA VPN users

[miteshrm]

Hello All,

I have created two tunnel groups each having its own local IP pool and group policy. IP Pool for Admin group is 10.100.100.0/24 and for Support group is 10.200.200.0/24

For authentication I have configured AAA server with radius attribute class (25) in authorization result. This assigns users a desired group policy.

I have disabled tunnel group list and using  defaultWebVPN  tunnel group (using AAA for authentication) as I don't want users to select any connection profile during login.

I facing only one issue in this setup. I am not able to assign IP address for users belonging to respective tunnel group.

Under defaultWebVPN, I have configured both address pools but IPs are being assigned from Admin pool only.

How can I achieve above requirement.

[Rob Ingram]

Hi,
Define the unique IP address pool under the group-policies not the tunnel-group.
Alternatively you could push the desired IP pool via RADIUS upon authorisation.

HTH