«

We use our dhcp server to assign addresses to clients when they vpn in
to our 3005 concentrator. Works great. However, I want one or two
machines to get a static IP when they vpn in, so our network admin
tools on the lan will work (the tools require an ip to be entered for
admin consoles). Or, can we specify in the latest vpn client (4.0.5) a
static ip and setup a different group in the concentrator to use that?

Bill;

Make a DHCP reservation on the DHCP server specifiying the MAC of the
connecting client.


(BillH) wrote in message news:<. com>...
> We use our dhcp server to assign addresses to clients when they vpn in
> to our 3005 concentrator. Works great. However, I want one or two
> machines to get a static IP when they vpn in, so our network admin
> tools on the lan will work (the tools require an ip to be entered for
> admin consoles). Or, can we specify in the latest vpn client (4.0.5) a
> static ip and setup a different group in the concentrator to use that?

Problem with dhcp is the client mac address from the dhcp
servers's point of view is always = to the mac address of the vpn
concentrator private interface.. dhcp reservation wont work

you really have 2 options...

1. give the user and internal account on the vpn concentrator and
specify their ip they get under user properties...

2. allow the user to specify an ip address when they connect...

Both can be allowed under...

Configuration | System | Address Management | Assignment

to allow #1, check off
"Use Address from Authentication Server"

to allow#2, check off
"Use Client Address"

You really need to make sure the client gets the ip you want him/her to.
You can also get this working with an external group (i.e. radius) where
the username can be assigned variables.

(CISCORUBS) wrote in message news:<. com>...
> Bill;
>
> Make a DHCP reservation on the DHCP server specifiying the MAC of the
> connecting client.
>
>
> (BillH) wrote in message news:<. com>...
> > We use our dhcp server to assign addresses to clients when they vpn in
> > to our 3005 concentrator. Works great. However, I want one or two
> > machines to get a static IP when they vpn in, so our network admin
> > tools on the lan will work (the tools require an ip to be entered for
> > admin consoles). Or, can we specify in the latest vpn client (4.0.5) a
> > static ip and setup a different group in the concentrator to use that?

I tried that...did not work. The concentrator goes out and gets another address.