topic Re: ipassignment.conf for Maestro environment in Mobile

ipassignment.conf for Maestro environment

NiladriSarkar — Thu, 07 Mar 2024 13:54:56 GMT

In regular cluster we mention the hostname to start the line in ipassignemnt.conf

Example in active-passive cluster :

for FW1 we will add the following line

DC1-F1 net 172.1.1.0/21 dns=(10.6.32.12,10.52.42.136,10.20.65.70) All_marketing_user

for FW2 we will add the following line

DC1-F2 net 172.1.1.0/21 dns=(10.26.32.122,10.25.42.136,10.20.65.70) All_marketing_user

now in an Maestro environment with three active gateways :

do we use the cluster name in place of (DC1-F1/F2 ) ?

Re: ipassignment.conf for Maestro environment

the_rock — Thu, 07 Mar 2024 14:02:03 GMT

I actually made note about this when CP Sales person was giving presentation to the customer about Maestro and they had exact same question and he told them that is exactly how you would do it. Im sadly not that versed with Maestro at all, so never tested it myself, but certainly has logic to it.

Best,

Andy

Re: ipassignment.conf for Maestro environment

NiladriSarkar — Thu, 07 Mar 2024 14:32:49 GMT

thanks for responding @the_rock . I did try with the cluster name and it seems it does not always work !

Following my example above, if an user from marketing connected to VPN 5 times, randomly 2 times he/she got a correct IP from ipasignement.conf.. 3 times he/she got an IP from DHCP which is for non-marketing users !!

imagine if we have rules restricted with source IP address.. it will be meaning less. 😞

will be creating an TAC ticket.

Re: ipassignment.conf for Maestro environment

the_rock — Thu, 07 Mar 2024 14:35:00 GMT

That sounds like a good idea...sorry, as I said, not so familiar with Maestro environment myself, so cant offer any other advice/

Hope TAC will help you. Let us know how it gets solved.

Best,

Andy

Re: ipassignment.conf for Maestro environment

NiladriSarkar — Thu, 07 Mar 2024 14:54:44 GMT

thanks @the_rock .

Re: ipassignment.conf for Maestro environment

the_rock — Thu, 07 Mar 2024 14:55:57 GMT

No worries.

Andy

Re: ipassignment.conf for Maestro environment

Alexey_Sushko — Wed, 05 Jun 2024 13:33:19 GMT

Hello friend!

May be you have deal with the question?

Can you share the information please?