topic Re: Question - CP default Office Mode Pool - edited but not changing in SASE and Remote Access

Question - CP default Office Mode Pool - edited but not changing

Joe_Kanaszka — Fri, 05 Jan 2024 20:12:00 GMT

Hello again -

AIO device running R81.20 - latest JHF.

I edited my "CP default Office Mode address pool" object to allow me to assign a range of static IPs via the ipassignment.conf file. These static IPs are now "outside" of the pool.

The weird thing is - If I double-click on the new pool object it shows the correct network and subnet mask but when I view in the VPN Domain object for instance it still is showing the old IP nework address but the new subnet mask...

I've installed policy.

Now even though I've added my static IP range to my mobile access encryption domain the new static IPs are not getting encrypted. I think the old pool is interfering somehow...

Any ideas?

Re: Question - CP default Office Mode Pool - edited but not changing

the_rock — Fri, 05 Jan 2024 20:13:33 GMT

Hey Joe,

What do you have set as enc doman for remote access community?

Andy

Re: Question - CP default Office Mode Pool - edited but not changing

Joe_Kanaszka — Fri, 05 Jan 2024 20:21:09 GMT

Hi Andy -

I had the CP default pool in the Remote Access community. We do not use that group.

The new CP default pool should be a network of .192 with a mask of 255.255.255.192. My static range goes from .129-133.

If I double click on the pool object it shows correctly with .192. However when I view the object by itself it still shows a network address of .128....

Weird right?

Re: Question - CP default Office Mode Pool - edited but not changing

the_rock — Fri, 05 Jan 2024 20:22:28 GMT

This is what I meant..

Re: Question - CP default Office Mode Pool - edited but not changing

the_rock — Fri, 05 Jan 2024 20:25:00 GMT

Are you able to send screenshot of office mode gw settings, as well as ipassignment.conf file?

Andy

Re: Question - CP default Office Mode Pool - edited but not changing

Joe_Kanaszka — Fri, 05 Jan 2024 20:26:06 GMT

I got ya - yes - both my pool and static IP range is in there.

Re: Question - CP default Office Mode Pool - edited but not changing

Joe_Kanaszka — Fri, 05 Jan 2024 20:48:45 GMT

Yep - I've redacted out for privac

Re: Question - CP default Office Mode Pool - edited but not changing

the_rock — Fri, 05 Jan 2024 20:44:05 GMT

Looks right to me...not 100% sure buddy, sorry. Its been a while since I did this, would probably have to lab it up

Re: Question - CP default Office Mode Pool - edited but not changing

Joe_Kanaszka — Fri, 05 Jan 2024 20:45:52 GMT

No worries man - I'm going to open up a ticket. Have a good weekend!