the suggestion from Jof is clever but it doesn't scale. I am afraid that you would require of an external device to help you accomplish this, such as using a Radius and Attribute Value Pairs (AVP) to send back to the SA the associated IP for an user (framed-ip-address) upon connection.
---- Sent from iPhone On Feb 4, 2012, at 8:21 PM, "Jonathan Lassoff" <j...@thejof.com> wrote: > On Sat, Feb 4, 2012 at 3:46 PM, Maciej Jan Broniarz <gau...@gausus.net> wrote: >> I have a bunch of users using SSL VPN to Juniper SA box. Is there a way to >> "give" each user the same static ip that will >> always be given to that user, whenever he logs in? > > Unfortunately, I don't know of a simple way of doing this. However, I > would think that it should be possible to create address pools with > just one IP in them (they're not CIDR, just ranges), user groups with > just one user in them, and map each user to their own set of user > group and address pool. > > Cheers, > jof > _______________________________________________ > juniper-nsp mailing list juniper-nsp@puck.nether.net > https://puck.nether.net/mailman/listinfo/juniper-nsp _______________________________________________ juniper-nsp mailing list juniper-nsp@puck.nether.net https://puck.nether.net/mailman/listinfo/juniper-nsp
