Tutorial: Set Up Group Dynamic IP Address Assignments

Abstract

Set up a dynamic subnet using a group IP address network, and Access Server can assign IP addresses to users assigned to the group.

Overview

This tutorial shows how to set up dynamic IP address assignments using Access Server groups.

You could use dynamic address assignment to specify a range of IP addresses in a subnet for users assigned to Group 1 while assigning static IP addresses from the same subnet to users in Group 1. You could also define the subnet range to dynamically use all available IP addresses in the subnet.

Refer to this separate tutorial, if you're looking to set up static IP address assignments using Access Server groups.

Prerequisites

• An installed Access Server.

• User accounts.

• At least one group account.

Important

This tutorial doesn't apply to Access Server deployments configured in a cluster. Per-group VPN client IP address assignment isn't available in cluster mode.

Step 1: Define the subnet range

Important

Each subnet's first and last IP address in Access Server is reserved. Suppose you specify the subnet 198.51.100.0/24. You should ensure you don't assign 198.51.100.1 or 198.51.100.254 to VPN clients.

We don't support public IP address subnets here. Access Server operates in a private network because it's a virtual private network solution. It's possible to force public IP addresses into Access Server's configuration, but we don't support that solution.

1. Sign in to the Admin Web UI.

2. Click Groups.

3. Click the desired group.

4. In the Networking section, enter the subnet for the static IP address network in Subnets assigned to this group.

5. Enter your subnet range into the two fields for Dynamic subnet ranges for this group.

   Important

   Ensure the range is within the assigned static IP address subnet for the group.

6. Click Save and Restart.

Tip

If helpful, you can refer to our subnet mask cheat sheet.

Step 2: Assign the user to the group

1. From the Single Group Page, click the Users tab.

2. Ensure the user is assigned to the group.

3. If needed, add the user by clicking Add Existing User and selecting them by their username. You can also click Add New User to create a new user attached to this group.

4. Click Save and Restart.