SA4500 - Network Connect and Static IP address

[raoul23_]

Hello

Could someone please help with the following querry.
We use a Juniper SA4500 to access the network using Network Connect. Users are allocated an IP address through DHCP. Is it possible for a remote user connecting in this way to have the same IP address every time?

Thanks

[srigelsford_]

Hi,

You could use a DHCP server to achieve this using static entries, or if it's a permissions thing put users in more specific roles and have connection profiles per role, for instance .1-.5 for IT, .6-.10 for HR and so on.

Sam.

[raoul23_]

Hi Sam

Thank you for your reply.

I have already tried using DHCP to reserve an IP address using the Mac Address as the unique client identifier string. This didn't work because the Juniper Network Virtual Adapter does not use the Mac Address in the adress leases record but a system generated number.

Raoul

[zanyterp_]

Not really. The IVE will try to provide the same IP; but if it is already given out from the DHCP server, that will be honored.

[haas_]

---

@raoul23 wrote:

Hi Sam

Thank you for your reply.

I have already tried using DHCP to reserve an IP address using the Mac Address as the unique client identifier string. This didn't work because the Juniper Network Virtual Adapter does not use the Mac Address in the adress leases record but a system generated number.

Raoul

---

This is 100% correct. It is documented in the KB, Sucks!

KB 17497

Summary:

Is there any way to have static MAC address for Network Connect virtual adapter?

Problem or Goal:

Assigning static MAC address for Network Connect virtual adapter.

Solution:

As of now, it is not possible to have a static MAC address for Network Connect virtual adapter.
The virtual MAC for Network Connect virtual adapter will always start with 00:FF and the rest of the MAC is generated dynamically.

The MAC address of the Network Connect client machine is randomly generated based on the algorithm whose result will change with system and time.

[NULL_]

I would recommend you to observe the Configuration-Guide about Radius-Authentication.

The Radius server can assign to every User a specific IP.

regards

NULL

[pwallace]

I will link these two together:
https://community.pulsesecure.net/t5/Pulse-Secure-vADC/Save-Data/m-p/38142