topic Re: Proper syntax for ipassignment.conf file for assigning static ip to LDAP user in Firewall and Security Management https://community.checkpoint.com/t5/Firewall-and-Security-Management/Proper-syntax-for-ipassignment-conf-file-for-assigning-static-ip/m-p/202377#M38084 <P>The gateway already knows who the user is based on the fact the user had to authenticate before being provided access.<BR />When the client is assigned an IP, it will either use the default Office Mode configuration or whatever the ipassignment.conf configuration says (based on the user who authenticated).</P> Fri, 05 Jan 2024 21:03:20 GMT PhoneBoy 2024-01-05T21:03:20Z Proper syntax for ipassignment.conf file for assigning static ip to LDAP user https://community.checkpoint.com/t5/Firewall-and-Security-Management/Proper-syntax-for-ipassignment-conf-file-for-assigning-static-ip/m-p/202334#M38076 <P>Good Morning and Happy Friday!</P><P>&nbsp;</P><P>Continuation from yesterday's post - AKA my journey to assign static IPs via the ipassignment.conf file for my remote users...</P><P>&nbsp;</P><P>&nbsp;</P><P>I'm trying to assign a static IP to a small group of remote users.&nbsp; The IPs I want to assign are not included in my OM Pool.</P><P>My syntax is this:</P><P>&nbsp;</P><P><STRONG>10.10.10.10 </STRONG>(GW)&nbsp; (tab)&nbsp; <STRONG>10.1.1.1 </STRONG>(static ip)&nbsp; (tab)&nbsp; <STRONG>John</STRONG> (AD user)</P><P>Am I missing something?&nbsp; How does the Check Point know where the user account is in AD?&nbsp; I see instructions for authentication cia certificates but we are not doing that - we are just using AD user name and password and DUO 2FA.&nbsp;&nbsp;</P><P>I'm still receiving an IP from the OM Pool.</P><P>&nbsp;</P><P>Edited:</P><P>It works!</P><P>My syntax was wrong - I forgot to comment out the headers in the sample file.</P><P>So my question just so I understand how this username authentication works is this:</P><P>In the example above, John is able to receive an IP address because he exists in my AD user directory.&nbsp; How does the ipassignment.conf file authenticate John?&nbsp; Does the file use the DNS server specfied in my Office Mode configuration and the DNS points the file to my AD server?</P><P>&nbsp;</P><P>&nbsp;</P><P>Thank you again!</P><P>&nbsp;</P><P>BR,</P><P>&nbsp;</P><P>Joe</P><P>&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P><P>&nbsp;</P> Fri, 05 Jan 2024 18:49:28 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Proper-syntax-for-ipassignment-conf-file-for-assigning-static-ip/m-p/202334#M38076 Joe_Kanaszka 2024-01-05T18:49:28Z Re: Proper syntax for ipassignment.conf file for assigning static ip to LDAP user https://community.checkpoint.com/t5/Firewall-and-Security-Management/Proper-syntax-for-ipassignment-conf-file-for-assigning-static-ip/m-p/202377#M38084 <P>The gateway already knows who the user is based on the fact the user had to authenticate before being provided access.<BR />When the client is assigned an IP, it will either use the default Office Mode configuration or whatever the ipassignment.conf configuration says (based on the user who authenticated).</P> Fri, 05 Jan 2024 21:03:20 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Proper-syntax-for-ipassignment-conf-file-for-assigning-static-ip/m-p/202377#M38084 PhoneBoy 2024-01-05T21:03:20Z Re: Proper syntax for ipassignment.conf file for assigning static ip to LDAP user https://community.checkpoint.com/t5/Firewall-and-Security-Management/Proper-syntax-for-ipassignment-conf-file-for-assigning-static-ip/m-p/202380#M38085 <P>Got it.&nbsp; Thank you PhoneBoy.</P><P>&nbsp;</P><P>Have a great weekend!</P><P>&nbsp;</P><P>-Joe</P> Fri, 05 Jan 2024 21:22:49 GMT https://community.checkpoint.com/t5/Firewall-and-Security-Management/Proper-syntax-for-ipassignment-conf-file-for-assigning-static-ip/m-p/202380#M38085 Joe_Kanaszka 2024-01-05T21:22:49Z