topic Re: Hi All, can someone help me with this please. I’m trying to assign individual IP address for remote access users. I want to assign an Ip address that isn’t in the IP pool range. What’s the best way to do this? in SASE and Remote Access

Hi All, can someone help me with this please. I’m trying to assign individual IP address for remote access users. I want to assign an Ip address that isn’t in the IP pool range. What’s the best way to do this?

Omar_Khalif — Tue, 13 Mar 2018 08:58:04 GMT

something like this

https://www.fir3net.com/Firewalls/Check-Point/configuring-per-ip-assignment-using-ipassignmentconf-in-checkpoint.html

Re: Hi All, can someone help me with this please. I’m trying to assign individual IP address for remote access users. I want to assign an Ip address that isn’t in the IP pool range. What’s the best way to do this?

G_W_Albrecht — Tue, 13 Mar 2018 11:41:32 GMT

You can read all about it in the Remote Access VPN Administration Guide R80.10 p.54ff !

ipassignment.conf works with identified users - for other situations, you can use an IP Pool, a DHCP or RADIUS server or IP Assignment Based on Source IP Address using the $FWDIR/conf/user.def.

Re: Hi All, can someone help me with this please. I’m trying to assign individual IP address for remote access users. I want to assign an Ip address that isn’t in the IP pool range. What’s the best way to do this?

Omar_Khalif — Tue, 13 Mar 2018 12:03:49 GMT

Thanks for your reply. I'm using Winscp to log into the firewall. I've edited the file $FWDIR/conf/ipassignment.conf with the changes I want. Then I made sure I installed l the policy on the Smart Dashboard .

But when I want to check the file I get an error message on the command prompt on Winscp .

File cannot be found when I run this command vpn ipafile_check ipassignment.conf detail.

Can you help?

Re: Hi All, can someone help me with this please. I’m trying to assign individual IP address for remote access users. I want to assign an Ip address that isn’t in the IP pool range. What’s the best way to do this?

G_W_Albrecht — Tue, 13 Mar 2018 13:37:40 GMT

Besides the vpn ipafile_check ipassignment.conf command - does OM IPs get assigned to the users as defined ?

Do you run the command directly in WinSCP ? I always use WinSCP to open CLI in PuTTY. Also, rather use # vpn ipafile_check $FWDIR/conf/ipassignment.conf detail - maybe just the path is needed

Re: Hi All, can someone help me with this please. I’m trying to assign individual IP address for remote access users. I want to assign an Ip address that isn’t in the IP pool range. What’s the best way to do this?

Omar_Khalif — Tue, 13 Mar 2018 15:42:37 GMT

I've edited the file and run the # vpn ipafile_check $FWDIR/conf/ipassignment.conf detail - and it worked fine. It says the line is okay. But I'm still getting the ip address from the ip pool range instead of the assigned ip address from the file.

Re: Hi All, can someone help me with this please. I’m trying to assign individual IP address for remote access users. I want to assign an Ip address that isn’t in the IP pool range. What’s the best way to do this?

G_W_Albrecht — Tue, 13 Mar 2018 15:50:25 GMT

First, $FWDIR/conf/ipassignment.conf is checked for the user name - can you see in SVTracker the User log in with that name ? This has worked as long as i can think of CP products...

The main ressource (apart from RA VPN Admin Guide) is sk33422 Office Mode IP and ipassignment.conf file; an addition can be found in sk116415 Machine Authentication IP assignment using ipassignment.conf not working. Possible pitfalls can be found in sk116603 and sk105162 (depending also on version).

Re: Hi All, can someone help me with this please. I’m trying to assign individual IP address for remote access users. I want to assign an Ip address that isn’t in the IP pool range. What’s the best way to do this?

G_W_Albrecht — Thu, 15 Mar 2018 15:13:46 GMT

Any success yet ?