Cisco VPN 3005 Concentrator using RADIUS, want to assign individual IP addresses to each user

Do I need to create separate groups?  One thing I haven't understood is that those groups are setup for internal authentication, but I'm pointing them to a RADIUS server.  If I setup the IP address under user management, how does it utilize if authenticating off a RADIUS server?  Is there a place in the RADIUS server to put in an IP?  I'm using Microsoft Radius server.  I have a common group with filters setup that I'd like to assign each user an individual IP so we can track their access to an individual program.

Thanks for any help with this.
Truity Credit UnionAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

cat6509Commented:
If you are willing to do this with separate groups, you can do this by assigning separate IP pools.

I would hope there is another way, I am still looking.
0
Truity Credit UnionAuthor Commented:
I've thought about that.  I have the setting - Configuration - System - Address Management - Assignment - Use ADdress from Authentication Server checked?  I'll go look at the Radius Server to see if there is a place to put an IP address.

thanks for the reply
0
cat6509Commented:
0
Identify and Prevent Potential Cyber-threats

Become the white hat who helps safeguard our interconnected world. Transform your career future by earning your MS in Cybersecurity. WGU’s MSCSIA degree program was designed in collaboration with national intelligence organizations and IT industry leaders.

Truity Credit UnionAuthor Commented:
I found a location under the Internet Authentication Service (RADIUS server) that allows a remote access policy to assign a Framed IP address but nothing to distinguish one user from the next?  Do I link that to the AD account somehow?
0
cat6509Commented:
can you look at the dian-in properties for hte user account ? does it have a static IP address option ?
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
Truity Credit UnionAuthor Commented:
Under dial-in for AD there is a setting for assign a static IP address but it didn't work :(, I must not have something set correctly.
0
Truity Credit UnionAuthor Commented:
I just got it to work... you have to add the same IP range under the address pool for the correct group on the VPN concentrator - woohoo!
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
VPN

From novice to tech pro — start learning today.