Skip to main content



Cisco Defense Orchestrator

Create IP Address Pool

You can configure IPv4 and IPv6 IP address pools for ASAs to assign them to clients connecting remotely to your network using a VPN connection. The order in which you specify the pools is important. If you configure more than one address pool for a connection profile or group policy, the ASA uses them in the order in which you added them to the ASA.

To define the IPv4 address pool, provide the IP address range. An example of an IPv4 address pool is - 

To define the IPv6 address pool, provide a starting IP address range, the address prefix, and the number of addresses configurable in the pool. An example of an IPv6 address pool is 2001:DB8:1::1. 

If you assign addresses from a non-local subnet, we suggest that you add pools that fall on subnet boundaries to make adding routes for these networks easier.

Perform the following to create an IP address pool:

  1. From the CDO navigation bar, click Objects to view the Object page.
  2. Click the blue plus button blue_cross_button.png and select ASA > Address Pool.
  3. In the Create IP Address Pool dialog box enter this information:
    • Object Name: Enter the name of the address pool. It can be up to 64 characters
    • IPv4 address pool: Select this radio button to configure IPv4 address pools.
      • IPv4 Address Range: Enter the first IP address and last IP address available in each configured pool. For example, -
      • Mask: Identifies the subnet on which this IP address pool resides.
    • IPv6 address pool: Select this radio button to configure IPv6 address pools.
      • IPv6 Address: Enter the first IP address available in the configured pool and prefix length in bits in <address>/<prefix> format. 
        For example, 2001:DB8:1::1/3.
      • Number of Addresses: Identifies the number of IPv6 addresses, starting at the IP Address, that are in the pool.
  4. Click Save.
  • Was this article helpful?