Cisco Catalyst SD-WAN Remote Access Configuration Guide, Releases 26.x and Later

PDF

Cisco Catalyst SD-WAN Remote Access Configuration Guide, Releases 26.x and Later

Configure a unique local private IP pool on the SD-WAN RA headend

Updated: March 10, 2026

Want to summarize with AI?

Log in

Configure each SD-WAN RA headend with a unique private IP pool to assign IP addresses to remote access clients.

Configure each SD-WAN RA headend with a unique private IP pool from which to assign IP addresses to remote access clients. The IP pool can be shared across the service VPNs in which remote access clients connect to the SD-WAN RA headend.

Note

This task is optional if all remote access users connect to the headend by hardware remote access client.

Procedure

  1. In Cisco SD-WAN Manager, use a CLI add-on template for the SD-WAN RA headend device to configure the local IP pool.

    Ensure that the IP pool range is sufficient for the expected number of remote access connections.

    Example:

    ip local pool sdra-ip-pool ip-address-range-start ip-address-address-end

    Example:

    ip local pool sdra_ip_pool 10.0.0.1 10.0.0.100

  2. On the RADIUS server, configure the per-user or group policy to specify the IP pool name configured in the previous step.

  3. Optionally, for each remote access service VPN, use a Cisco SD-WAN Manager OMP feature template to advertise the remote access IP pool range as a summary-only route.

    If the SD-WAN RA IP pool summary is not advertised, OMP automatically advertises, for each remote access client, static host routes that are dynamically programmed by the SD-WAN RA headend. This may not be optimal if there is a large number of remote access clients across the Cisco Catalyst SD-WAN fabric.

The SD-WAN RA headend is configured with a unique private IP pool for assigning IP addresses to remote access clients.