On Thu, Dec 21, 2017 at 8:56 AM, Daniel Lenski <dlenski at gmail.com> wrote: > This behavior is supported by AnyConnect (CONNECT with X-CSTP-Address header) > and by GlobalProtect (POST /ssl-vpn/getconfig.esp with preferred-ip form field). By the way, I presume that Juniper also has a way to request a specific IP address. Possibly it can be included in the "vestigial authentication packet"? I tried injecting various bits into this packet, and then quickly found myself in agreement with the comment about how horrible the protocol is. Dan
