Cisco ASA set static IP via Radius

Marki jm+freeradiususer at roth.lu
Tue Oct 5 16:48:31 CEST 2021


Hello,

Would you know how to set a static IP address for a remote access 
connection on Cisco ASA?

I tried using standard reply attributes "Framed-IP-Address" and 
"Framed-IP-Netmask", but it's just ignoring those without a specific error.

Looking at table 34-2 here: 
https://www.cisco.com/c/en/us/td/docs/security/asa/asa91/configuration/general/asa_91_general_config/aaa_radius.html 
this comes as no surprise as they mention an attribute called 
"IETF-Radius-Framed-IP-Address" but don't associate it to an attribute 
number.

I have looked at /usr/share/freeradius/dictionary.cisco.asa but don't 
find anything that looks appropriate.

It can't be that difficult setting a static IP, there is just no 
documentation anywhere.

Surely someone has done this before?

Thanks,
Marki



More information about the Freeradius-Users mailing list