1-6
Cisco ASA Series CLI Configuration Guide
Chapter 1 Configuring IP Addresses for VPNs
Configuring DHCP Addressing
This command has more arguments that this example includes. For more information, see the command
reference.
Configuring DHCP Addressing
To use DHCP to assign addresses for VPN clients, you must first configure a DHCP server and the range
of IP addresses that the DHCP server can use. Then you define the DHCP server on a connection profile
basis. Optionally, you can also define a DHCP network scope in the group policy associated with a
connection profile or username. This is either an IP network number or IP Address that identifies to the
DHCP server which pool of IP addresses to use.
The following examples define the DHCP server at IP address 172.33.44.19 for the connection profile
named firstgroup. They also define a DHCP network scope of 192.86.0.0 for the group policy called
remotegroup. (The group policy called remotegroup is associated with the connection profile called
firstgroup). If you do not define a network scope, the DHCP server assigns IP addresses in the order of
the address pools configured. It goes through the pools until it identifies an unassigned address.
The following configuration includes more steps than are necessary, in that previously you might have
named and defined the connection profile type as remote access, and named and identified the group
policy as internal or external. These steps appear in the following examples as a reminder that you have
no access to subsequent tunnel-group and group-policy commands until you set these values.
Guidelines and Limitations
You can only use an IPv4 address to identify a DHCP server to assign client addresses.
Configuring DHCP Addressing Using the CLI
Command Purpose
Step 1
vpn-addr-assign dhcp
Configures IP address pools as the address
assignment method. Enter the vpn-addr-assign
command with the dhcp argument. See also
Configuring IPv4 Address Assignments at the
Command Line, page 1-2.
Step 2
tunnel-group firstgroup type remote-access
Establishes the connection profile called firstgroup
as a remote access connection profile.
Enter the tunnel-group command with the type
keyword and remote-access argument.
Step 3
tunnel-group firstgroup general-attributes
Enters the general-attributes configuration mode
for the connection profile so that you can configure
a DHCP server.
Enter the tunnel-group command with the
general-attributes argument.
To Next Page
Loading...
Need help?
General
