Create a Post
cancel
Showing results for 
Search instead for 
Did you mean: 
Omar_Khalif
Participant

Hi All, can someone help me with this please. I’m trying to assign individual IP address for remote access users. I want to assign an Ip address that isn’t in the IP pool range. What’s the best way to do this?

0 Kudos
6 Replies
G_W_Albrecht
Legend
Legend

You can read all about it in the Remote Access VPN Administration Guide R80.10 p.54ff !

ipassignment.conf works with identified users - for other situations, you can use an IP Pool, a DHCP or RADIUS server or IP Assignment Based on Source IP Address using the $FWDIR/conf/user.def.

CCSE CCTE CCSM SMB Specialist
0 Kudos
Omar_Khalif
Participant

Thanks for your reply.  I'm using Winscp to log into the firewall. I've edited the file $FWDIR/conf/ipassignment.conf  with the changes I want. Then I made sure I installed l the policy on the Smart Dashboard . 

But when I want to check the file I get an error message on the command prompt on Winscp .

File cannot be found when I run this command  vpn ipafile_check ipassignment.conf detail. 

Can you help?

0 Kudos
G_W_Albrecht
Legend
Legend

Besides the vpn ipafile_check ipassignment.conf command - does OM IPs get assigned to the users as defined ?

Do you run the command directly in WinSCP ? I always use WinSCP to open CLI in PuTTY. Also, rather use # vpn ipafile_check $FWDIR/conf/ipassignment.conf detail - maybe just the path is needed

CCSE CCTE CCSM SMB Specialist
0 Kudos
Omar_Khalif
Participant

I've edited the file and run the # vpn ipafile_check $FWDIR/conf/ipassignment.conf detail - and it worked fine. It says the line is okay. But I'm still getting the ip address from the ip pool range instead of the assigned ip address from the file. 

0 Kudos
G_W_Albrecht
Legend
Legend

First, $FWDIR/conf/ipassignment.conf is checked for the user name - can you see in SVTracker the User log in with that name ? This has worked as long as i can think of CP products...

The main ressource (apart from RA VPN Admin Guide) is sk33422 Office Mode IP and ipassignment.conf file; an addition can be found in sk116415 Machine Authentication IP assignment using ipassignment.conf not working. Possible pitfalls can be found in sk116603 and sk105162 (depending also on version).

CCSE CCTE CCSM SMB Specialist
0 Kudos
G_W_Albrecht
Legend
Legend

Any success yet ?

CCSE CCTE CCSM SMB Specialist
0 Kudos

Leaderboard

Epsum factorial non deposit quid pro quo hic escorol.

Upcoming Events

    CheckMates Events