[j-nsp] Juniper SA SSL VPN static ip for user

[Jonathan Lassoff]

On Sat, Feb 4, 2012 at 6:42 PM, Barny Sanchez <barnys at juniper.net> wrote:
> the suggestion from Jof is clever but it doesn't scale. I am afraid that you would require of an external device to help you accomplish this, such as using a Radius and Attribute Value Pairs (AVP) to send back to the SA the associated IP for an user (framed-ip-address) upon connection.

That seems much cleaner.

Maintaining many groups or address pools per-user is a lot more work
to setup with the web UI. By manipulating the XML configuration, it's
possible to automate this. Still, it seems like a hack.