topic Re: Configure Office Mode IP and ipassignment.conf file in SASE and Remote Access

Configure Office Mode IP and ipassignment.conf file

JohnnyWang — Fri, 19 Jul 2024 14:37:47 GMT

Hi Guy,

Currently I am configuring VPN Client, with the need to use multiple subnets for VPN IP allocation, I am configuring that on the "ipassignment conf" file, however when I configure 1 IP for a user and authenticate the connection with personal cert, office mode cannot issue an IP. On the contrary, if I let that user authenticate via username & password, it will receive the IP. Error as attach image

Re: Configure Office Mode IP and ipassignment.conf file

PhoneBoy — Fri, 19 Jul 2024 20:02:31 GMT

You must specify the full DN for the certificate used to authenticate the user when using ipassignment.conf.
See: https://support.checkpoint.com/results/sk/sk33422

Re: Configure Office Mode IP and ipassignment.conf file

JohnnyWang — Sat, 20 Jul 2024 03:59:18 GMT

Hi Bro,

Yes, I specifically full DN for cert cp-gw, addr 172.16.110.129 CN=tronnq,OU=users,O=cp-sms.umc.local.o9egxh

But this is a cert created on SMS, not LDAP, I see that it has successfully authenticated but does not receive the Office Mode IP

Re: Configure Office Mode IP and ipassignment.conf file

the_rock — Sat, 20 Jul 2024 11:58:55 GMT

I recall while ago when I did this for the customer, we followed that sk, could not figure it out and TAC was able to fix it for us. How they did it, I have no recollection, sorry mate : - (

Andy

Re: Configure Office Mode IP and ipassignment.conf file

PhoneBoy — Sun, 21 Jul 2024 15:31:06 GMT

Suggest a TAC case: https://help.checkpoint.com