topic Re: CP_default_Office_Mode_addresses_pool - Questions in SASE and Remote Access

CP_default_Office_Mode_addresses_pool - Questions

Joe_Kanaszka — Fri, 12 Jan 2024 16:37:54 GMT

Good Morning!

Question:

We have two networks in our production environment:

10.100.105.0/24

10.100.106.0/24

We have configured a CP default office mode addresses pool:

10.100.107.64/26

Perhaps a stupid question:

Could we assign User A a DHCP reservation in the office of 10.100.106.200 and the same IP address via ipassignment.conf to be used when User A works from home?

Does the Office Mode IP need to be on its own seperate subnet from the NETs configured on the Check Point interfaces?

Thank you and Happy Friday!

-Joe

Re: CP_default_Office_Mode_addresses_pool - Questions

PhoneBoy — Fri, 12 Jan 2024 20:58:19 GMT

You can't use the same IP in more than one location.
The Office Mode segment is generally associated to a different network segment than whatever is configured on the gateway interfaces.
If you do use the same address space for the Office Mode segment, you may need some manual proxy arps configured (or at least it did when I tried it last).

Re: CP_default_Office_Mode_addresses_pool - Questions

Joe_Kanaszka — Fri, 12 Jan 2024 21:02:54 GMT

Thank you PhoneBoy. That's what I thought - just wanted to verify.

Thank you again and have a great weekend!

-Joe

Re: CP_default_Office_Mode_addresses_pool - Questions

the_rock — Sat, 13 Jan 2024 00:09:34 GMT

Hey brother,

Phoneboy is absolutely correct, sadly, it would be nice, but cant do : - )

Best,

Andy