Static IP For SSL VPN Users

[tpfannes]

All,

I have an application that requires my SSL VPN Clients to have the same (static) IP address when connecting via ssl VPN.  Is there anyway to accomplish this similar to using MAC Reservation in DHCP?  

[gschmitt]

I think you have to create seperate portals for all users.... How many users are we talking about?

[ede_pfau]

Source NAT might be easier. Clients need unique IP addresses for routing.

sNAT: in the policy "ssl.root" -> "internal", create an IP pool with just one address and check NAT, specify IP pool.

[emnoc]

Or craft a pool address for just that user. You can could use dhcp also but mac_addr reservation would be of no use ( it's a layer2 function )

[tpfannes]

gschmitt wrote:

I think you have to create seperate portals for all users.... How many users are we talking about?

Around 100 so SNAT or individual portals is out of the question.  Think I'm out of luck.

[ede_pfau]

Around 100 so SNAT or individual portals is out of the question.

No, on the contrary. Think about what I've proposed. It might well be the only way to achieve this.

What's so difficult in creating ONE IP pool??