Assigning IP addresses to VPN Clients

[hrafn]

I'm thinking about using the VPN gateway (PPTP) on my pix and would like to give one VPN user access to server A while the other VPN user has access to server B.

So does anyone know how or if it is possible to Assign specific IP addresses to each users or groups so you can give each user specific access rights to servers depending un username? (using ACL for example)

Is it possible to let the Radius (or TACACS+) assign these addresses?

Would I perhaps need to use the IPSEC client frim Cisco?

Thanks
Hrafn.

 

[yizhar]

HI.

The PPTP server implementation of the pix does not have that option.
Using the Cisco IPSec VPN client you can configure 2 different vpngroup - but I did not try that so I'm not sure that it works as you requested.

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar

 

[ianbla]

Never tried this myself but under Active Directory Users & Computers, click on the users account, properties, Dial-inj Tab, Assign Static IP address.

Then set up the Access-list.

Worth a try.

 

[hrafn]

No luck.. it seems like I have to use the PIX's address-pool when confguring the vpdn group.

Thanks though