DHCP VPN Question

  • Thread starter Thread starter Nathan Spear
  • Start date Start date
N

Nathan Spear

Can I have my Microsoft DHCP server assign specific IP address to VPN
clients?

I would like to control what a VPN client is able to access from my
network such as other VPNs.

Thanks for reading.

Nathan Spear
(e-mail address removed)
 
Can I have my Microsoft DHCP server assign specific IP address to VPN
clients?

I would like to control what a VPN client is able to access from my
network such as other VPNs.

Thanks for reading.
Click to expand...

If you look at the VPN settings, I think it's under DHCP you can assign
a RANGE or a DHCP server address - if you want them to use a range of
IP's only for VPN then setup VPN to only used a fixed segment of IP's
and not the DHCP server.
 
You can configure Remote Access to use a static pool of IP addressee instead
of DHCP and of course you would need to exclude that address range from your
DHCP scope. I am not sure how you expect that IP assignments can control
where a user goes on your network however. You can create a Remote Access
Policy in ras that has input and output filters in the edit profile/IP box
to restrict what traffic can go in either direction on the VPN connection
that the policy applies to. The link below explains Remote Access
Policies. --- Steve

http://www.microsoft.com/windows200...ndows2000/en/server/help/sag_rap_elements.htm
 
You can force a specific IP for remote access on a per user basis - Dialin
tab in user properties. However, I agree with Steven - not sure how you
plan on controlling access to resources based on IP address.

Doug Sherman
MCSE Win2k/NT4.0, MCSA, MCP+I, MVP
 
The plan is to give specific users a specific IP when they VPN in.
Then firewall rules will be used to allow only those specific IP
addresses to access other networks.

Thanks for the replies.

-Nathan
 
Back
Top