Cisco PIX 500 Series Configuration Manual page 710

Configuring an IP Address Assignment Method
To define a DHCP server for IP addressing, perform the following steps.
To configure DHCP as the address assignment method, enter the vpn-addr-assign command with the
Step 1
dhcp argument:
hostname(config)# vpn-addr-assign dhcp
hostname(config)#
To establish the tunnel group called firstgroup as a remote access or LAN-to-LAN tunnel group, enter
Step 2
the tunnel-group command with the type keyword. The following example configures a remote access
tunnel group.
hostname(config)# tunnel-group firstgroup type ipsec-ra
hostname(config)#
To enter general-attributes configuration mode, which lets you configure a DHCP server, enter the
Step 3
tunnel-group command with the general-attributes argument.
hostname(config)# tunnel-group firstgroup general-attributes
hostname(config)#
To define the DHCP server, enter the dhcp-server command. The following example configures a DHCP
Step 4
server at IP address 172.33.44.19.
hostname(config-general)# dhcp-server 172.33.44.19
hostname(config-general)#
Exit tunnel-group mode.
Step 5
hostname(config-general)# exit
hostname(config)#
Step 6 To define the group policy called remotegroup as an internally or externally configured group, enter the
group-policy command with the internal or external argument. The following example configures an
internal group.
hostname(config)# group-policy remotegroup internal
hostname(config)#
(Optional) To enter group-policy attributes configuration mode, which lets you configure a subnetwork
Step 7
of IP addresses for the DHCP server to use, enter the group-policy command with the attributes
keyword.
hostname(config)# group-policy remotegroup attributes
hostname(config-group-policy)#
Step 8 (Optional) To specify the range of IP addresses the DHCP server should use to assign addresses to users
of the group policy called remotegroup, enter the dhcp-network-scope command. The following example
configures at network scope of 192.86.0.0.
hostname(config-group-policy)# dhcp-network-scope 192.86.0.0
hostname(config-group-policy)#
Cisco Security Appliance Command Line Configuration Guide
31-4
Chapter 31 Configuring IP Addresses for VPNs
OL-12172-03