topic Re: Assign fixed IP to a VPN user on Spark 1570 in Spark Firewall (SMB)

Assign fixed IP to a VPN user on Spark 1570

jorgemsassuncao — Tue, 30 May 2023 13:29:42 GMT

Hello,
I have a Spark 1570 with build R81.10.05 and it is connected to the AD, is there a way to assign a fixed IP to a specific VPN user?

VPN users authenticate through AD.
Best regards.

Re: Assign fixed IP to a VPN user on Spark 1570

PhoneBoy — Tue, 30 May 2023 13:36:23 GMT

Yes via the ipassignment.conf file.
See: https://support.checkpoint.com/results/sk/sk33422

Re: Assign fixed IP to a VPN user on Spark 1570

the_rock — Tue, 30 May 2023 14:43:49 GMT

As @PhoneBoy said, just modify that file. Below is what it looks like by default.

Andy

Re: Assign fixed IP to a VPN user on Spark 1570

jorgemsassuncao — Thu, 01 Jun 2023 10:56:44 GMT

Hello,

I'm not finding the ipassignment.conf file, there in the SMB?
I have a Spark 1570.

Re: Assign fixed IP to a VPN user on Spark 1570

the_rock — Thu, 01 Jun 2023 11:23:35 GMT

Should be same location...$FWDIR/conf/ipassignment.conf

Re: Assign fixed IP to a VPN user on Spark 1570

jorgemsassuncao — Mon, 12 Jun 2023 11:07:43 GMT

Hello,
I'm new to this and I'm having a hard time finding the way you're suggesting.

Re: Assign fixed IP to a VPN user on Spark 1570

just13pro — Mon, 12 Jun 2023 12:07:58 GMT

Make sure you are login to the Gateway CLI and NOT Management CLI.

Go to the path mentioned above and modified the file ipassignment.conf

Re: Assign fixed IP to a VPN user on Spark 1570

jorgemsassuncao — Tue, 13 Jun 2023 10:20:32 GMT

Hello,
I think these gateways (1500 series) do not have or do not allow access to this file.

Re: Assign fixed IP to a VPN user on Spark 1570

PhoneBoy — Tue, 13 Jun 2023 17:57:48 GMT

Yes they do.
Here's a screenshot from my own 1590 that definitely has this file:

Further, sk33422 references Embedded Gaia explicitly.

Re: Assign fixed IP to a VPN user on Spark 1570

jorgemsassuncao — Wed, 14 Jun 2023 15:00:37 GMT

Hello @PhoneBoy

Sorry, I wasn't logged in with expert mode.

Now I was able to access the file and made the change I want by adding the IP and user and saving the change.
Then when I try to connect the vpn with the user in question, the assigned IP continues to be by dhcp and not the IP that I specified for the user.

Any suggestions of what might be missing?

Gateway Type IP Address User Name
============= ===== ======================================== =======================
* addr 192.168.125.1 ServidorBackup
* addr 192.168.125.2 infodinamicavpn

Re: Assign fixed IP to a VPN user on Spark 1570

PhoneBoy — Wed, 14 Jun 2023 17:09:04 GMT

Manual changes to this file require reinstalling the security policy to take effect.
If this device is centrally managed, install the security policy.
If the device is locally managed, you can do one of two things:

Make some other change to the access policy via clish/WebUI which will trigger a recompile of the policy.
Use the expert command fw_configload

Re: Assign fixed IP to a VPN user on Spark 1570

jorgemsassuncao — Wed, 14 Jun 2023 17:36:12 GMT

Thank you,

You help a lot.
Using the expert command fw_configload save the changes.