Fixed IP Addresses

[BobW333]

I need to be able to assign Remote users fixed IP addresses when they dial in to a 3640 and are authenticated by Cisco Secure.
Cisco Secure looks like it should do this OK but when the user dials in they're not given any address.
Cisco Secure site on an NT platform.

Any and all help would be appreciated

 

[StarTAC]

mmm.. never used Cisco Secure before.. but i know u can do this in RADIUS.. and IIRC, Cisco Secure should have support for RADIUS..

the RADIUS attribute for this is Framed-IP-Address = x.x.x.x

good luck..

 

[Frenchie2069]

What does the interface configuration look like on the NAS (the 3640)?

You can definately do this - I have had it working at a previous site, but I can't remember the exact syntax. I think you need to use:

peer default ip address dhcp

or you might need to disable the router assigning it using:

no peer default ip address

Check the CiscoSecure documentation for more details - it is in there somewhere

HTH,
Michael.

 

[BobW333]

Thanks both,

Startac, the Secure box is an NT server and is running TACACS+

Michael, All the documentation that I can find refering to doing this is for Cisco Secure (CS) on a Unix platform.

We've had the NAS allocating addresses from a pool OK but what we need to do is use the CS user database to allocate a specific address to a specific user to restrict access through the firewall.
The NAS authenticates "ALL" connections to CS OK but just won't do the decent thing and pass on the configured address.

I might be missing something, a life would be good!

Bob