Create IP Address Pool
Remote Clients
Remote Clients
Remote-Pool 10.0.1.100 to 10.0.1.150
Remote-Pool 10.0.1.100 to 10.0.1.150
R1(config)# ip local pool Remote-Pool 10.0.1.100 10.0.1.150
Creating a local address pool is optional if you are using an external DHCP server.
© 2007 Cisco Systems, Inc. All rights reserved.
If you are using a local IP address pool, you will need to configure that pool using the ip local pool command.
To configure a local pool of IP addresses to be used when a remote peer connects to a point-to-point interface, complete these steps.
Step 1 Create a local pool and define the range of addresses for clients.
R1(config)# ip local pool {default | poolname} [low-ip-address [high-ip-address]] [group group-name] [cache-size size]
Syntax Description
|
default |
Creates a default local IP address pool that is used if no other pool is named |
|
poolname |
Name of the local IP address pool |
|
low-IP-address [high-IP-address] |
First and, optionally, last address in an IP address range |
|
group group-name |
(Optional) Creates a pool group |
|
cache-size size |
(Optional) Sets the number of IP address entries on the free list that the system checks before assigning a new IP address Returned IP addresses are placed at the end of the free list. Before assigning a new IP address to a user, the system checks the number of entries from the end of the list (as defined by the cache-size size option) to determine that there are no returned IP addresses for that user. The range for the cache size is 0 to 100. The default cache size is 20. |
4-312 Securing Networks with Cisco Routers and Switches (SNRS) v2.0 © 2007 Cisco Systems, Inc.
Use the ip local pool command to create one or more local address pools from which IP addresses are assigned when a peer connects. You may also add another range of IP addresses to an existing pool. To use a named IP address pool on an interface, use the peer default ip address pool interface configuration command. A pool name can also be assigned to a specific user by using AAA RADIUS and TACACS functions.
If no named local IP address pool is created, a default address pool is used on all point-to-point interfaces after the ip address-pool local global configuration command is issued. If no explicit IP address pool is assigned, but pool use is requested by use of the ip address-pool local command, the special pool named "default" is used.
The optional group keyword and associated group name allows the association of an IP address pool with a named group. Any IP address pool created without the group keyword automatically becomes a member of a base system group.
An IP address pool name can be associated with only one group. Subsequent use of the same pool name, within a pool group, is treated as an extension of that pool, and any attempt to associate an existing local IP address pool name with a different pool group is rejected. Therefore, each use of a pool name is an implicit selection of the associated pool group.
Note To reduce the chances of inadvertent generation of duplicate addresses, the system allows creation of the special pool named "default" only in the base system group; that is, no group name can be specified with the pool name "default."
All IP address pools within a pool group are checked to prevent overlapping addresses; however, no checks are made between any group pool member and a pool not in a group. The specification of a named pool within a pool group allows the existence of overlapping IP addresses with pools in other groups, and with pools in the base system group, but not among pools within a group. Otherwise, processing of the IP address pools is not altered by their membership in a group. In particular, these pool names can be specified in peer commands and returned in RADIUS and AAA functions with no special processing.
IP address pools can be associated with VPNs. This association permits flexible IP address pool specifications that are compatible with a VPN and a VPN routing and forwarding (VRF) instance.
The IP address pools can also be used with the translate commands for one-step vty-async connections and in certain AAA or TACACS+ authorization functions.
IP address pools are displayed with the show ip local pool command in EXEC mode.
© 2007 Cisco Systems, Inc. Secured Connectivity 4-313
Continue reading here: Step 1 Create a Dynamic Crypto Map
Was this article helpful?