Hello,
I have an IPSec setup built using security/ipsec-tools running great so far. The only problem are roadwarriors and IP address assignment - in the default setup users get an IP addresses from a virtual address pool. I would like to have static IP addresses for every roadwarrior connecting to my VPN service. How can it be done?
Solution:
Ok, I will respond myself here as I found a good way to solve my problem and the solution can be helpful for anyone facing the problem.
To make roadwarriors get static IP address on the remote side when they connect you can use net/freeradius3. You can then define roadwarrior users in /usr/local/etc/raddb/users and assing IP addresses to them using
I have an IPSec setup built using security/ipsec-tools running great so far. The only problem are roadwarriors and IP address assignment - in the default setup users get an IP addresses from a virtual address pool. I would like to have static IP addresses for every roadwarrior connecting to my VPN service. How can it be done?
Solution:
Ok, I will respond myself here as I found a good way to solve my problem and the solution can be helpful for anyone facing the problem.
To make roadwarriors get static IP address on the remote side when they connect you can use net/freeradius3. You can then define roadwarrior users in /usr/local/etc/raddb/users and assing IP addresses to them using
Framed-IP-Address and Framed-IP-Netmask atributes - with these racoon will set fixed user IP on login.