https://community.checkpoint.com/t5/SASE-and-Remote-Access/Log-shows-VPN-Client-with-LAN-IP-instead-of-office-mode-IP/m-p/217282#M3676 <P>Did this ever work? Just one user with the issue?</P> <P>Andy</P> Wed, 12 Jun 2024 13:27:02 GMT the_rock 2024-06-12T13:27:02Z https://community.checkpoint.com/t5/SASE-and-Remote-Access/Log-shows-VPN-Client-with-LAN-IP-instead-of-office-mode-IP/m-p/217254#M3674 <P>Hi Mates!</P><P>we got a strange case here where I was inable to find any fitting iformation about so far. Maybe someone here has seen something similar?</P><P>My customer has a lot of RA VPN Clients and one of them has a problem at the moment, where we don't know what to do about. Since its affecting one of many, we suspect a problem at the remote end, but we would like to be sure about that.</P><P>The client can connect to RA without issues, but is not able to access the allowed services after that anymore. At first we thought we might have a problem with identities sourced from RA VPN (we had an issue there a while back), as the Logs did not show the clients identity after the authentication and all the rules are based on access roles/user identities. We then noticed the source IP that is shown in the Logs: Its not the office mode IP but the LAN IP of the client.<BR />We then had the client generate some logs for us and in those we can see that the client is getting an office mode IP.</P><P>So the client can connect and gets an office mode IP assigned correctly, but then for some reason connections are made with the LAN IP as source. (At least that is what SmartConsole Logs are showing, we still need to confirm this with a tcpdump).</P><P>&nbsp;</P><P>Any idea what could be causing this?</P><P>&nbsp;</P><P>&nbsp;</P><P>Best Regards,</P><P>Alex</P> Wed, 12 Jun 2024 08:25:56 GMT https://community.checkpoint.com/t5/SASE-and-Remote-Access/Log-shows-VPN-Client-with-LAN-IP-instead-of-office-mode-IP/m-p/217254#M3674 Kryten 2024-06-12T08:25:56Z https://community.checkpoint.com/t5/SASE-and-Remote-Access/Log-shows-VPN-Client-with-LAN-IP-instead-of-office-mode-IP/m-p/217262#M3675 <P>Which Endpoint VPN client version is used by the effected device?</P> <P>Does the machine have both Wired and Wireless connections and how do those addresses compare against things like:</P> <P>- gateways encryption domain</P> <P>- location awareness settings/policy</P> Wed, 12 Jun 2024 10:55:03 GMT https://community.checkpoint.com/t5/SASE-and-Remote-Access/Log-shows-VPN-Client-with-LAN-IP-instead-of-office-mode-IP/m-p/217262#M3675 Chris_Atkinson 2024-06-12T10:55:03Z https://community.checkpoint.com/t5/SASE-and-Remote-Access/Log-shows-VPN-Client-with-LAN-IP-instead-of-office-mode-IP/m-p/217282#M3676 <P>Did this ever work? Just one user with the issue?</P> <P>Andy</P> Wed, 12 Jun 2024 13:27:02 GMT https://community.checkpoint.com/t5/SASE-and-Remote-Access/Log-shows-VPN-Client-with-LAN-IP-instead-of-office-mode-IP/m-p/217282#M3676 the_rock 2024-06-12T13:27:02Z