vpn

[Shahar_Grober]

Hi Guys,

quick question for home office times 

I have a RA VPN setup with office mode provided by a DHCP server (not the Gateway) 

Is there a way to know how much time the gateway keeps the IP addresses in the om_assigned_ips  table after a user is disconnected from the VPN?

We see that we have some users connected when running 

fw tab -t om_assigned_ips -s

but it doesn't match what we see in our DHCP server (a lot more leases) 

is there a way to control the connection table timeout and not counting on the DHCP leases to end?

[PhoneBoy · Accepted solution]

Actually it should how you at the top of the table what the default is (number after "expires") if you run without -s.
On my gateway it's 900 seconds.
You can also see what the expiry is for a given entry as well.

[Shahar_Grober]

Thanks for the answer, PB!

we need to make sure that we can see the DHCP server leases and that they match what we see on the gateway

Hope you are safe wherever you are 🙂

[PhoneBoy]

I'm hunkered down at home with my family, all is well 😁