Tutorial: Set a Static IP Address for a User Through a Group Subnet
Set up a unique subnet using a group IP address network and Access Server will then have a subnet it can use for static IP address assignment.
Overview
This tutorial shows how to set up static IP address assignments for Access Server users through a group assignment. Alternatively, you can use a global static IP address network to assign a static IP address to a user.
Refer to this tutorial to set up a group dynamic IP address assignment.
Default client address assignment
Access Server works with Layer 3 routing mode by default. In this mode, VPN clients are assigned addresses from a private subnet, which is different from other subnets used in your networks.
Access Server automatically assigns dynamic IP addresses to clients when they connect. This is usually done in sequential order until it reaches the end of the subnet portion available to the OpenVPN daemon the client connects with, at which point it starts reusing older addresses.
This behavior is similar to DHCP, but Access Server doesn't technically run a DHCP server. It's more like a rough emulation of assigning addresses automatically.
To find the subnet for VPN clients:
Sign in to the Admin Web UI.
Click VPN Server.
Click the Subnets tab.
The IP address and netmask bits are displayed under Dynamic subnet for the Default VPN client address pool.
Tip
If you're configuring static IP address assignments for Access Server in layer 2 mode, you must set the IP address on the client system's virtual network adapter. (We no longer recommend or offer support for using Access Server in layer 2 mode.)
An installed Access Server.
User accounts.
At least one group account.
Sign in to the Admin Web UI.
Click Groups.
Click on the desired group.
The single group page displays.
Under Networking, enter the subnet for the static IP address network in Subnets assigned to this group.
Click Save and Restart.
Tip
If helpful, you can refer to our subnet mask cheat sheet.
Click Users.
Click the username of the desired user account.
The single-user page displays.
Under Networking, set IP addressing to Static.
Enter the static IP address into the IPv4 field.
Important
Ensure the IP address falls within the static IP address network you previously defined.
Click Save and Restart.
Access Server now assigns the static IP address to your user when they connect.
Ensure the user is in the group you assigned the subnet:
From the Single User Page, check the Assigned to group.
From the Single Grou Page, click the Users tab, and check that the user is listed there.