[Last Call] Learn how to a build a cloud-first strategyRegister Now

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 690
  • Last Modified:

How Set Static IP to Active Directory users (Windows 2003)

Hello,

Please, see following topic i attached screenshot from my configurations: http://www.experts-exchange.com/Community_Support/General/Q_26954855.html

I have 2 dedicated IP and config my RRAS.
i wanna set dedicate IP to specified user for connect to internet with his/her VPN connection (with IP assignment).

Please, help me.
It's second time which i send this question and i don't receive any answer
0
re-searcher
Asked:
re-searcher
  • 9
  • 4
3 Solutions
 
re-searcherAuthor Commented:
Hi TG-TIS,

Thanks for your great help and it's useful,
I have to public IP (i.e IP1 , IP2) and both of them set to my internet interface.
i do step by step like article and set 192.168.110.1 as private and and reserve IP2 on 192.168.110.1
everything ok and i connect to server but when i browse internet i receive IP1.

what's wrong?
0
 
re-searcherAuthor Commented:
RRAS just allocate IP1 to users automatically and i IP2 is idle, while both of them are set on my internet interface and i cant connect to server with both IPs.
internal routing work as well and IPA mapped to IP2 and user can browse internet after connecting. but IP1 allocate to user.
0
VIDEO: THE CONCERTO CLOUD FOR HEALTHCARE

Modern healthcare requires a modern cloud. View this brief video to understand how the Concerto Cloud for Healthcare can help your organization.

 
arnoldCommented:
How are you authenticating the users that will be connecting establishing the VPN? IAS usually will be the method by which you can set a specific IP.

Another option is that the VPN tcp/IP configuration should be set to a specific IP versus obtain IP from dhcp via VPN.

Could you repost the IP tab/address pool  with the To and from IP allocation range? You seem to have 1000 IPs in the pool.

Double check the Netmask as well.
0
 
re-searcherAuthor Commented:
Hi Arnold,

For authentication i set group policy which just accept users from Group Of "A", and with active directory i set private IP to one of my users.
i follow the article (which TG-TIS posted) and do like that step by step.
i don't use DHCP, i just set static address pool.

 

 

i assign 192.168.110.1 to user from active directory > dial-in tab.

and it's status of user when connect to server
 user status
0
 
re-searcherAuthor Commented:
In addition you can see more screeshots from here

just i change some configuration the 6th screenshot change to my 1st screenshot in previous post.
0
 
arnoldCommented:
usually your segment allocation should not span multiple segments.  Do you envision any time that you will have 1000 VPN connections?
note that 192.167. is a public IP range that could pose problems.
You should use something in the 192.168.x.x range

The other thing is you have a mix your IP pool has one block, while the allocated IP seems different .
0
 
re-searcherAuthor Commented:
Thanks for your attention i fix my mistake and change to 192.168.x.x
But problem not from it, and public IP not set to private IP 192.168.110.1
0
 
re-searcherAuthor Commented:
with this configuration 204.1.1.149 should set to 192.168.110.1
after time which testuser as been connect to server 192.168.110.1 will browse internet with another public IP (i mean 204.1.1.104).
0
 
arnoldCommented:
Using an IP pool you will always assign an availble IP in sequence.  If you have three connections, the first three IPs will be assigned..
The outgoing issue is part of your External Router Configuration and likely means that 204.1.1.104 is the default gateway.  IF you need/want this traffic to comeonut on a specific IP, you would need to create  an outgoing rule that tells the router packets coming from this internal system must exit via this IP.

Outgoing mapping rules.

Do you have 192.168.110.x set anywhere?
0
 
re-searcherAuthor Commented:
I assign Static IP 192.168.110.1 to testuser from active directory > dial-in tab.

and from reserve ip ( see this image ).

just it.
0
 
arnoldCommented:
You've answered your own question, you set the IP for the user in AD.
Presumably you noticed the error in the reserve IP that it shows as 192.167.110.1 and likely once you correct it, all should be fixed.
0
 
re-searcherAuthor Commented:
Wow, i see.
i don't know why i use 167 instead of 168 and in AD use 168 :)

Thanks for your help it's work...
0
 
re-searcherAuthor Commented:
Thanks arnold
0

Featured Post

Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

  • 9
  • 4
Tackle projects and never again get stuck behind a technical roadblock.
Join Now