- Products
- Network Security
Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
Security ServicesComprehensive security for your network security solution
Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
Capture ATPMulti-engine advanced threat detection
Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
Secure Mobile AccessRemote, best-in-class, secure access
Wireless Access PointsEasy to manage, fast and secure Wi-FI
SwitchesHigh-speed network switching for business connectivity
- Email Security
Email SecurityProtect against today’s advanced email threats
- Cloud Security
Cloud App SecurityVisibility and security for Cloud Apps
Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
Capture ClientStop advanced threats and rollback the damage caused by malware
Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
- Support Widget
- Products
- Network Security
- Next Generation FirewallNext-generation firewall for SMB, Enterprise, and Government
- Security ServicesComprehensive security for your network security solution
- Network Security ManagerModern Security Management for today’s security landscape
- Advanced Threat Protection
- Capture ATPMulti-engine advanced threat detection
- Capture Security applianceAdvanced Threat Protection for modern threat landscape
- Access Security
- Cloud Edge Secure AccessDeploy Zero-Trust Security in minutes
- Secure Mobile AccessRemote, best-in-class, secure access
- Wireless Access PointsEasy to manage, fast and secure Wi-FI
- SwitchesHigh-speed network switching for business connectivity
- Email Security
- Email SecurityProtect against today’s advanced email threats
- Cloud Security
- Cloud App SecurityVisibility and security for Cloud Apps
- Cloud Firewall (NSv)Next-generation firewall capabilities in the cloud
- Endpoint Security
- Capture ClientStop advanced threats and rollback the damage caused by malware
- Content Filtering ClientControl access to unwanted and unsecure web content
- Product Widgets
- Product Menu Right Image
- Network Security
- Solutions
- Solutions Widgets
- Solutions Image Widgets
- Solutions Widgets
- Partners
- Partner Widgets
- Partners Image Widgets
- Partner Widgets
- Support
- Support Widget
- Support Image Widgets
- Support Widget
SMA 100: Configure static IPs or IP ranges for specific users and groups
11/03/2021 
34 People found this article helpful
35,228 Views
Description
Customers may need to configure specific IP addresses or ranges for certain users or group of users. This KB article explains how to achieve this by configuring different static IP Pools per user or per group.
Resolution
The IP addresses Pool can be configured globally, per user or per group.
In order to set the global IP range that the NetExtender clients will receive when they connect to the SSL VPN you need to go to Clients | Settings|Use Static Pool and specify the range inside "Client Address Range Begin" and "Client Address Range End" as in the example shown below.
If you need to configure a specific IP address for a particular user you can do it by going to Users|Local Users , edit the user settings.
Add the specific ip address for user under Clients .
When that particular user connects to the VPN, he/she will get assigned that specific IP address or range.
NOTE: In order for the user to appear inside the "Local Users" menu, this user must have been created locally or authenticated before as External Users.
Make also sure that the option "Delete external user accounts on logout" for that specific domain is not selected. You can check this by going to "Portals" > "Domains" and click on the "Configure" button for that particular domain.
Related Articles
- Initial Setup Guide of SMA1000 for high security environments
- How can I get root access to SMA100
- SMB SSL-VPN: User principal name (UPN) support on SMB SSL VPN devices
YES
NO