topic Re: You cannot receive an office mode ip address in General Topics

You cannot receive an office mode ip address

Dyslexic155 — Mon, 24 Apr 2023 14:50:47 GMT

Hello Guys,

We are having an issue with Mobile Access, where user gets error message (Connection failed You cannot receive an Office Mode IP address because the Security Gateway does not have a license for Office Mode)

The problem started after switching the gateway to threat prevention, it was displayed that IPS trial license is active then we noticed under Mobile Access in the license overview it's no longer 0/50 users but 0/5.

If I log out of the VPN, my colleague can log in, But if I try to log in again I get the error message.

It looks like the license is being overridden by the trial one or something, I can see both in the output of cplic print as below:

#cplic print
Host Expiration Features
trial 20May2023 PNP_BLADE_IPS:V1:trial CPSB-IPS
10.*.*.* never CPAP-SG510X CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-SSLVPN-50 CPSB-IA CPSB-SSLVPN-5 CPSB-ADNC CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPSB-CTNT CK-00-1C-7F-87-28-99
10.*.*.* never CPAP-SG510X CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-SSLVPN-50 CPSB-IA CPSB-SSLVPN-5 CPSB-ADNC CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPSB-CTNT CK-00-1C-7F-87-28-99
10.*.*.* never cpvp-snx-25-ngx cpvp-snx-25-ngx cpsb-swb cpvp-snx-5-ngx cpsb-swb cpsb-adnc-m CK-00-1C-7F-87-28-99

Do we have to delete the trial license or what's recommended in this case?

*Edit: I noticed at the user center that the product SKU is CPSB-MOB-50, does this mean that CPSB-SSLVPN-50 is not the one?

Thanks in advance,

Re: You cannot receive an office mode ip address

Dyslexic155 — Mon, 24 Apr 2023 14:07:12 GMT

Re: You cannot receive an office mode ip address

G_W_Albrecht — Mon, 24 Apr 2023 14:20:31 GMT

IPS trial is not the culprit: Remove the third license:

10.*.*.* never CPAP-SG510X CPSB-FW CPSM-C-2 CPSB-VPN CPSB-NPM CPSB-LOGS CPSB-SSLVPN-50 CPSB-IA CPSB-SSLVPN-5 CPSB-ADNC CPSB-IPS-S1 CPSB-URLF CPSB-APCL-S1 CPSB-AV CPSB-ABOT-S CPSB-ASPM CPSB-CTNT CK-00-1C-7F-87-28-99

This is an (older) duplicate license missing the additional CPSB-SSLVPN-50 - i suppose it is found first and so the issue results. Should be removed !

Re: You cannot receive an office mode ip address

G_W_Albrecht — Mon, 24 Apr 2023 14:25:18 GMT

How many licenses are in the UserCenter ? I would assume that #2 and #3 are the same license for appliance 00-1C-7F-87-28-99. According to the license string, only #2 includes the Mob-50 ! #3 was licensed BEFORE the Mob-50 was added to the license, #2 afterwards.

Re: You cannot receive an office mode ip address

Chris_Atkinson — Mon, 24 Apr 2023 14:43:33 GMT

There are too many license strings reported there and you should remove the duplicate entries/evals.

What does the following command report?

[Expert@HostName]# cvpnd_admin license all

Also with reference to sk174258 what version & JHF is the gateway?

Re: You cannot receive an office mode ip address

Dyslexic155 — Mon, 24 Apr 2023 14:54:20 GMT

So should I deleted the second and third license?

[Expert@mon_vpn_gateway:0]# cvpnd_admin license all

MOB License:
Total used licenses are: 0
MOBMAIL License:
Total used licenses are: 0
[Expert@mon_vpn_gateway:0]#

We are running R80.40 JHF 180

Re: You cannot receive an office mode ip address

Dyslexic155 — Mon, 24 Apr 2023 14:55:10 GMT

But I can see already that CPSB-SSLVPN-50 is there on the first two, it's only missing on the third one right?

Re: You cannot receive an office mode ip address

the_rock — Mon, 24 Apr 2023 15:00:25 GMT

Here is my honest suggestion for the time being...just apply full eval license until this can be sorted out.