Allowing Overlapping Ip Pools Or Forcing Unique Pool Address Ranges - Cisco 2509 - Router - EN User Manual

Chapter 8 Establishing Cisco Secure ACS System Configuration
Allowing Overlapping IP Pools or Forcing Unique Pool Address
Ranges
Note
Step 1
Step 2
78-14696-01, Version 3.1
For information on assigning a group or user to an IP pool, see
Assignment Method for a User Group, page
IP Address, page 7-11.
Cisco Secure ACS provides automated detection of overlapping pools.
To use overlapping pools, you must be using RADIUS with VPN, and you cannot
be using Dynamic Host Configuration Protocol (DHCP).
You can determine whether overlapping IP pools are allowed by checking which
button appears below the AAA Server IP Pools table:
Allow Overlapping Pool Address Ranges—Indicates that overlapping IP
•
pool address ranges are not allowed. Clicking this button allows IP address
ranges to overlap between pools.
• Force Unique Pool Address Range—Indicates that overlapping IP pool
address ranges are allowed. Clicking this button prevents IP address ranges
from overlapping between pools.
To allow overlapping IP pools or to force unique pool address ranges, follow
these steps:
In the navigation bar, click System Configuration.
Click IP Pools Server.
If this feature does not appear, click Interface Configuration, click
Note
Advanced Options, and then select the IP Pools check box.
Result: The AAA Server IP Pools table lists any IP pools you have configured,
their address ranges, and the percentage of pooled addresses in use.
6-27, or
User Guide for Cisco Secure ACS for Windows Server
IP Pools Server
Setting IP Address
Assigning a User to a Client
8-61