Cisco ASA set static IP via Radius

[Marki]

My bad.

One should enable on the ASA: vpn-addr-assign aaa

Duh.

Then it works using standard attributes "Framed-IP-Address" and so on.

Wishing a nice evening,

Marki

On 10/5/2021 4:48 PM, Marki wrote:
> Hello,
>
> Would you know how to set a static IP address for a remote access 
> connection on Cisco ASA?
>
> I tried using standard reply attributes "Framed-IP-Address" and 
> "Framed-IP-Netmask", but it's just ignoring those without a specific 
> error.
>
> Looking at table 34-2 here: 
> https://www.cisco.com/c/en/us/td/docs/security/asa/asa91/configuration/general/asa_91_general_config/aaa_radius.html 
> this comes as no surprise as they mention an attribute called 
> "IETF-Radius-Framed-IP-Address" but don't associate it to an attribute 
> number.
>
> I have looked at /usr/share/freeradius/dictionary.cisco.asa but don't 
> find anything that looks appropriate.
>
> It can't be that difficult setting a static IP, there is just no 
> documentation anywhere.
>
> Surely someone has done this before?
>
> Thanks,
> Marki
>