IPSec mobile clients with static IP



  • Hi,
    I have IPsec IKEv2 on mobile clients and want to assign the IP addresses for some users staticly, Is it possible? How?
    I need this in AD Domain Users.
    Is there any possibility to do that?


  • Galactic Empire

    Radius, I think the AD server can provide radius, you'll also need to set up framed ip addresses.

    I use the inbuilt radius server, my user configs look something like this:-

    
    "andy" Cleartext-Password := "xxxxxxxxxx", Simultaneous-Use := "1", Expiration := "Apr 11 2027"
    
    	Framed-IP-Address = 172.16.8.2,
    	Framed-IP-Netmask = 255.255.255.0,
    	Framed-Route = "0.0.0.0/0 172.16.8.1 1"
    
    
    
    "Fred" Cleartext-Password := "xxxxxxxxxx", Simultaneous-Use := "1", Expiration := "Apr 11 2027"
    	Framed-IP-Address = 172.16.8.3,
    	Framed-IP-Netmask = 255.255.255.0,
    	Framed-Route = "0.0.0.0/0 172.16.8.1 1"