Tutorial: Assign a Static VPN Client IP Address to Users
Overview
This tutorial shows how to set up static IP address assignments for Access Server users in the Admin Web UI. Here, we set up a global static IP address network, but you can also use a group static IP address network to assign a static IP address to a user.
Default client address assignment
Access Server works with Layer 3 routing mode by default. In this mode, VPN clients are assigned addresses from a private subnet, which is different from other subnets used in your networks.
Access Server automatically assigns dynamic IP addresses to clients when they connect. This is usually done in sequential order until it reaches the end of the subnet portion available to the OpenVPN daemon the client connects with, at which point it starts reusing older addresses.
This behavior is similar to DHCP, but Access Server doesn't technically run a DHCP server. It's more like a rough emulation of assigning addresses automatically.
To find the subnet for VPN clients:
Sign in to the Admin Web UI.
Click VPN Server.
Click the Subnets tab.
The IP address and netmask bits are displayed under Dynamic subnet for the Default VPN client address pool.