8-61
User Guide for Cisco Secure ACS for Windows Server
78-14696-01, Version 3.1
Chapter 8 Establishing Cisco Secure ACS System Configuration
IP Pools Server
For information on assigning a group or user to an IP pool, see
Setting IP Address
Assignment Method for a User Group, page 6-27
, or
Assigning a User to a Client
IP Address, page 7-11
.
Allowing Overlapping IP Pools or Forcing Unique Pool Address
Ranges
Cisco Secure ACS provides automated detection of overlapping pools.
Note
To use overlapping pools, you must be using RADIUS with VPN, and you cannot
be using Dynamic Host Configuration Protocol (DHCP).
You can determine whether overlapping IP pools are allowed by checking which
button appears below the AAA Server IP Pools table:
•
Allow Overlapping Pool Address Ranges—Indicates that overlapping IP
pool address ranges are not allowed. Clicking this button allows IP address
ranges to overlap between pools.
•
Force Unique Pool Address Range—Indicates that overlapping IP pool
address ranges are allowed. Clicking this button prevents IP address ranges
from overlapping between pools.
To allow overlapping IP pools or to force unique pool address ranges, follow
these steps:
Step 1
In the navigation bar, click System Configuration.
Step 2
Click IP Pools Server.
Note
If this feature does not appear, click Interface Configuration, click
Advanced Options, and then select the IP Pools check box.
Result: The AAA Server IP Pools table lists any IP pools you have configured,
their address ranges, and the percentage of pooled addresses in use.
