---
title: 'Tutorial: Set Up Group Dynamic IP Address Assignments'
canonical: https://openvpn.net/as-docs/tutorials/tutorial--dynamic-group-ip-address/
product: Access Server Docs
description: Set up a dynamic subnet using a group IP address network, and Access Server can assign IP addresses to users assigned to the group.
---

# Tutorial: Set Up Group Dynamic IP Address Assignments

## Overview

This tutorial shows how to set up dynamic IP address assignments using Access Server groups.

You could use dynamic address assignment to specify a range of IP addresses in a subnet for users assigned to Group 1 while assigning static IP addresses from the same subnet to users in Group 1. You could also define the subnet range to dynamically use all available IP addresses in the subnet.

Refer to this separate [tutorial](https://openvpn.net/as-docs/tutorials/tutorial--static-group-ip-address.md), If you're looking to set up static IP address assignments using Access Server groups.

> **Note**
>
> In our documentation, we use example IPv4 addresses and subnets [reserved for documentation](https://en.wikipedia.org/wiki/Reserved_IP_addresses#IPv4), such as `192.0.2.0/24`, `198.51.100.0/24`, and `203.0.113.0/24`.
>
> Ensure you replace them with valid IPv4 addresses and subnets for your network(s).

## Prerequisites

- An [installed Access Server](https://openvpn.net/as-docs/installation.md).
- [User accounts](https://openvpn.net/as-docs/users.md).
- At least one [group account](https://openvpn.net/as-docs/groups.md).

> **Important**
>
> This tutorial doesn't apply to Access Server deployments configured in a cluster. Per-group VPN client IP address assignment isn't available in cluster mode.

## Step 1: Define the subnet range

1. Sign in to the Admin Web UI.
2. Click **User Management \> Group Permission**.
3. Click **More Settings** for the group to assign the subnet range.
   - Additional group settings display.
4. Enter your subnet range in the field, **Dynamic subnet ranges for this group (optional)**.
5. Enter the subnet for the static IP address network in **Subnets assigned to this group (optional)** under **VPN IP Addresses**.
6. Select **Save Settings** and **Update Running Server**.

> **Important**
>
> Each subnet's first and last IP address in Access Server is reserved. Suppose you specify the subnet **198.51.100.0/24**. You should ensure you don't assign **198.51.100.1** or **198.51.100.254** to VPN clients.
>
> We don't support public IP address subnets here. Access Server operates in a private network because it's a virtual private network solution. It's possible to force public IP addresses into Access Server's configuration, but we don't support that solution.

> **Tip**
>
> If helpful, you can refer to our [subnet mask cheat sheet](https://openvpn.net/as-docs/subnet-mask-cheat-sheet.md).

## Step 2: Assign the user to the group

1. Click the **Group** drop-down for the user.
2. Select the group from step 1.
3. Select **Save Settings** and **Update Running Server**.

---

Prev: [Tutorial: Set a Static IP Address for a User Through a Group Subnet](https://openvpn.net/as-docs/tutorials/tutorial--static-group-ip-address.md)
Next: [Network Segmentation and Access Control](https://openvpn.net/as-docs/tutorials/network-segmentation-and-access-control.md)
Index: https://openvpn.net/as-docs/llms.txt