Hello Mark, The address-pool, is processed in a hierarchical order
*Group-policy address-pool( this is the group-policy that the user belongs to)* * * *Group-policy address-pool ( this is the group-policy which is defined as the default-group-policy in the tunnel-group)* * * *Tunnel-group address-pool* * * So if you configure the address pool in the group-policies , it will take precendence over the address-pool configured in the tunnel-group. This way , you can configure selective address-pools to be used for various users connecting in. Cheers, TacACK * * * *
_______________________________________________ For more information regarding industry leading CCIE Lab training, please visit www.ipexpert.com
