Cisco VPN Client - assigning Static IP addresses to remote users

Posted on 2009-05-15
Last Modified: 2012-05-07
Currently i have a working IPSEC VPN configuration for a client on their 2801 running who has 6 x remote users.. they get assigned IP's from the vpn ip pool and they work fine..

now one of their software vendors needs these remote users to have static IP's in order to map printing functions etc to the right machine..

is this possible ? i cant find any references for doing this ? can someone point me in the right direction ? or post an example up ? noting that this is NOT a pix.. its a 2800 series Cisco router...

Question by:Steve

Accepted Solution

ksims1129 earned 500 total points
ID: 24394452
Yes the only way to do this is to set up diffirent group names for each user and assign each group a static IP.

crypto isakmp client configuration group vpnclient
 key cisco123
 pool statpool1

crypto isakmp client configuration group vpnclient2
 key cisco123
 pool statpool2
crypto isakmp client configuration group vpnclient6
 key cisco123
 pool statpool6
ip local pool statpool1
ip local pool statpool2
ip local pool statpool6

this should get you going. if you need clarification let me know
LVL 12

Author Closing Comment

ID: 31581820
Got around to doing this today..

Beautiful.. worked like a charm..

Featured Post

On Demand Webinar - Networking for the Cloud Era

This webinar discusses:
-Common barriers companies experience when moving to the cloud
-How SD-WAN changes the way we look at networks
-Best practices customers should employ moving forward with cloud migration
-What happens behind the scenes of SteelConnect’s one-click button

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Failover VPN Question Sonicwall 5 63
ASA 5505 not passing traffic to Netgear router 22 74
Simultaneous work of Wi-Fi and LAN on Win10 laptop 4 69
Cisco WRVS4400N 11 60
In the hope of saving someone else's sanity... About a year ago we bought a Cisco 1921 router with two ADSL/VDSL EHWIC cards to load balance local network traffic over the two broadband lines we have, but we couldn't get the routing to work consi…
Getting hacked is no longer a matter or "if you get hacked" — the 2016 cyber threat landscape is now titled "when you get hacked." When it happens — will you be proactive, or reactive?
After creating this article (, I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…

749 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question