Nortel 3050 Command Reference Manual page 318

318 Command Reference
Several IP pools can be configured, each with a unique ID number and
unique properties. By mapping the desired IP pool to a user group with the
/cfg/vpn #/aaa/group # /ippool command, you can create different
methods for IP address and network attributes assignment for different
user groups. One of the IP pools should be selected as the default IP pool
for the VPN, using the /cfg/vpn #/aaa/defippool command. Groups
for which no IP pool is assigned (IP pool number=0) will use the default
IP pool.
Table 121
IP Pool Menu Options (/cfg/vpn/ippool)
Command Syntax and Usage
type local|radius|dhcp
lowerip <IP address>
upperip <IP address>
dhcp
Copyright © 2007 Nortel Networks
.
Sets the source for allocation of IP address and network attributes to
the IPsec VPN client and the Net Direct client.
•
local: Lets you configure an IP address range on the NVG, using
the lowerip and upperip commands (see below). This range
will be used to allocate IP addresses to IPsec and Net Direct client
sessions. The network attributes configured under netattr (see
command below) will be pushed to the client.
•
radius: IP address and network attributes will be retrieved from
an external RADIUS server (if configured) when the remote
user is authenticated. See the /cfg/vpn #/aaa /auth
#/radius/netattr command.
•
dhcp: IP address and network attributes will be retrieved from an
external DHCP server. Also see the dhcp command below.
Sets the IP address from and including which the IP range starts.
This command is only available if the type command (see above) has
been set to local.
Sets the IP address to and including which the IP range ends.
This command is only available if the type command (see above) has
been set to local.
Displays the DHCP menu. To view menu options, see
<id> /ippool <id> /dhcp DHCP Configuration" (page
This command is only available if the type command (see above) has
been set to dhcp.
Nortel VPN Gateway
Command Reference
NN46120-103 01.01 Standard
10 September 2007
"/cfg/vpn
320).