topic Re: Delivering reserved IP in the ipassignment file to other users in SASE and Remote Access

Delivering reserved IP in the ipassignment file to other users

Rodrigo_Silva — Mon, 20 Jul 2020 17:38:10 GMT

Hello everyone,
I'm having problems with the ipassignment file.
I created the IP reservation for some users, but other users are receiving the reserved IP, and when users with reserved IPs will connect, it gives an error message saying that it was not possible to obtain an IP address.
Does anyone have any ideas how to solve this problem or where to see ipassignment logs?
Thank you in advance.

Re: Delivering reserved IP in the ipassignment file to other users

MartinTzvetanov — Tue, 21 Jul 2020 13:42:38 GMT

Print a sample of your ipassignment.conf

Re: Delivering reserved IP in the ipassignment file to other users

G_W_Albrecht — Tue, 21 Jul 2020 14:38:45 GMT

If you have carefully follower configuration examples in Remote Access VPN Administration Guide R80.20 p.58ff, logs will be helpfull:

In clients VPN Options > Advanced Tab, enable Logs. Replicate the issue on the client successfully noting the exact time and click on Collect Logs. Wait a while and the compressed logs will be shown. Disable logging and review the logs in trac.log e.g. using search for GW IP. Full debugs are found here: sk95486: How to debug Endpoint Client connection issues

Re: Delivering reserved IP in the ipassignment file to other users

PhoneBoy — Tue, 21 Jul 2020 14:33:59 GMT

If you assign a given user an IP address make sure it is impossible for any other user to be assigned this address.
This means making sure that IP is NOT in the general pool of users.

Re: Delivering reserved IP in the ipassignment file to other users

Rodrigo_Silva — Mon, 27 Jul 2020 14:20:44 GMT

The configuration was correct according to sk33422.
I had reserved random IPs, and according to my support team I was instructed to reserve IPs at the beginning or end of the range, and replace the gategay address with *.
My setup looks like this and apparently it's working right now.

################################
### Gateway Type IP Address User Name ###
################################
* addr 172.16.0.254 user1
* addr 172.16.0.253 user2
* addr 172.16.0.252 user3
* addr 172.16.0.251 user4
* addr 172.16.0.250 user5
* addr 172.16.0.249 user6

Thank you all

Re: Delivering reserved IP in the ipassignment file to other users

MartinTzvetanov — Tue, 28 Jul 2020 10:05:57 GMT

What is your config?

Re: Delivering reserved IP in the ipassignment file to other users

Rodrigo_Silva — Tue, 28 Jul 2020 12:31:31 GMT

Re: Delivering reserved IP in the ipassignment file to other users

Christian_Koehl — Tue, 28 Jul 2020 14:23:12 GMT

You are doing radius authentication. Have you check the office mode with a local user on the firewall before switching to radius? If not, does it work with a local user?

Re: Delivering reserved IP in the ipassignment file to other users

Rodrigo_Silva — Tue, 28 Jul 2020 17:27:05 GMT

I haven't tested it with a local user, only via radius.

Re: Delivering reserved IP in the ipassignment file to other users

Rodrigo_Silva — Thu, 13 Aug 2020 17:43:03 GMT

We continue to have the same problem.
According to sk116603 reserved ips cannot be in the range delivered in office mode.
We created a new range for reserved ips and now we have no more problems.
Thank you all

Re: Delivering reserved IP in the ipassignment file to other users

Jasvijay — Tue, 28 Sep 2021 13:57:41 GMT

Had same issue, but creating a new pool for a handful of users with reserved IP was not an option for us, What I ended up doing is using the group and range command to ensure users whose ip we dont care about are picked from the range(ex. 192.168.0.1-192.168.0.200) and the reserved IP's are set per user starting from back 254..253... and so on.

# Miami          range  100.107.105.110-100.107.105.119/24        Finance

Re: Delivering reserved IP in the ipassignment file to other users

VIKASH_GIRI — Fri, 18 Apr 2025 12:50:40 GMT

we tried and its worked..thnks for ur post