DHCP VPN Question

[Nathan Spear]

Can I have my Microsoft DHCP server assign specific IP address to VPN
clients?

I would like to control what a VPN client is able to access from my
network such as other VPNs.

Thanks for reading.

Nathan Spear
(e-mail address removed)

 

[Leythos]

Can I have my Microsoft DHCP server assign specific IP address to VPN
clients?

I would like to control what a VPN client is able to access from my
network such as other VPNs.

Thanks for reading.

If you look at the VPN settings, I think it's under DHCP you can assign
a RANGE or a DHCP server address - if you want them to use a range of
IP's only for VPN then setup VPN to only used a fixed segment of IP's
and not the DHCP server.

 

[Steven L Umbach]

You can configure Remote Access to use a static pool of IP addressee instead
of DHCP and of course you would need to exclude that address range from your
DHCP scope. I am not sure how you expect that IP assignments can control
where a user goes on your network however. You can create a Remote Access
Policy in ras that has input and output filters in the edit profile/IP box
to restrict what traffic can go in either direction on the VPN connection
that the policy applies to. The link below explains Remote Access
Policies. --- Steve

http://www.microsoft.com/windows200...ndows2000/en/server/help/sag_rap_elements.htm

 

[Doug Sherman [MVP]]

You can force a specific IP for remote access on a per user basis - Dialin
tab in user properties. However, I agree with Steven - not sure how you
plan on controlling access to resources based on IP address.

Doug Sherman
MCSE Win2k/NT4.0, MCSA, MCP+I, MVP

 

[Nathan Spear]

The plan is to give specific users a specific IP when they VPN in.
Then firewall rules will be used to allow only those specific IP
addresses to access other networks.

Thanks for the replies.

-Nathan