[j-nsp] Juniper SA SSL VPN static ip for user
jof at thejof.com
Sat Feb 4 22:11:25 EST 2012
On Sat, Feb 4, 2012 at 6:42 PM, Barny Sanchez <barnys at juniper.net> wrote:
> the suggestion from Jof is clever but it doesn't scale. I am afraid that you would require of an external device to help you accomplish this, such as using a Radius and Attribute Value Pairs (AVP) to send back to the SA the associated IP for an user (framed-ip-address) upon connection.
That seems much cleaner.
Maintaining many groups or address pools per-user is a lot more work
to setup with the web UI. By manipulating the XML configuration, it's
possible to automate this. Still, it seems like a hack.
More information about the juniper-nsp