VPN Client Machines with the pre defined IP Address

[rsoave]

Hi everyone!!

How can I make to accomplish this task:

I have a router with a VPN Server, and machines with VPN clients installed.

I terminated the tunnels, without problems, but I need another feauture:

There is any way to configure the VPN Server or VPN Client software, to give always the same IP address to determined machine, conecting by VPN client??

There is any way to bind this feature by user or even phisical address??

Any help is welcome.

Regards..

[sachinraja]

You cannot think of doing it if you are doing authentication/authorisation locally, because the username/pw are bound the the router. Incase you have a ACS server, you can try doing this. Enable AAA and redirect all authentication requests to the tacacs server. Add a new user and on the IP address tab, select "assign static IP address" and give the static IP from the pool defined earlier.So, when the user connects with this username, he will get the IP defined for him.

Try this and let us know.

[ositechnologies]

You can do that by creating multiple vpngroups and by attaching single host ACL to each group

[swraight]

With the vpngroups that you create, you will create an address-pool and that address pool will only have one ip address.