Fixed IP for SSL VPN Login

Question

Hello, 
 one of our service provider logs in with SSL VPN to monitor one of his devices (PBX) system. 
 He is complaining that he sometimes gets a different IP address (probably when he logs in again). 
 
 I looked into the configuration of the firewall, DHCP, etc. 
 
 Currently everything seem to be capsuled and AFIK the configurable DHCP service is not used to assign IPs for VPN users (maybe it is used internally but I do not find it in the GUI). 
 
 The solution should be persistent to firmware updates if possible. 
 
 Is there a way to assingn a dedicated IP address to an SSL-VPN user or the corresponding Device (MAC address)? 
 
 Best regards, 
 Bernd

sachingurung · Answer

Hi Brend, 
 Unfortunately, it is not possible to lease a static IP address to a remote access user connected through SSL VPN. However, you can use static remote access IP for L2TP, PPTP and IPSec by defining the IP address in specific User definition. 
 Thanks,

BAlfson · Answer

I recently did the following for a client... 
 Say the user is named John: 
 
 Put an Additional Address [John] on the Internal interface. 
 Create a NAT rule like 
 
 SNAT : John (User Network) -> Web Surfing -> {Apache server} : from Internal [John] (Address) 
 Note the difference between the "Internal [John] (Address)" and "John (User Network)" objects. Have Apache key off the IP of the "Internal [John] (Address)" object. 
 Cheers - Bob