Cisco ASA set static IP via Radius

Marki jm+freeradiususer at
Tue Oct 5 17:06:02 CEST 2021

My bad.

One should enable on the ASA: vpn-addr-assign aaa


Then it works using standard attributes "Framed-IP-Address" and so on.

Wishing a nice evening,


On 10/5/2021 4:48 PM, Marki wrote:
> Hello,
> Would you know how to set a static IP address for a remote access 
> connection on Cisco ASA?
> I tried using standard reply attributes "Framed-IP-Address" and 
> "Framed-IP-Netmask", but it's just ignoring those without a specific 
> error.
> Looking at table 34-2 here: 
> this comes as no surprise as they mention an attribute called 
> "IETF-Radius-Framed-IP-Address" but don't associate it to an attribute 
> number.
> I have looked at /usr/share/freeradius/ but don't 
> find anything that looks appropriate.
> It can't be that difficult setting a static IP, there is just no 
> documentation anywhere.
> Surely someone has done this before?
> Thanks,
> Marki

More information about the Freeradius-Users mailing list