- CheckMates
- :
- Products
- :
- Quantum
- :
- Remote Access VPN
- :
- Re: Endpoint VPN client assigned worng office mode...
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic for Current User
- Bookmark
- Subscribe
- Mute
- Printer Friendly Page
Are you a member of CheckMates?
×- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Endpoint VPN client assigned worng office mode ip address
Dear
My gateway is 1550,enable remote access vpn,version is R80.20.25 (992002077)
Several users give feedbacks said that the vpn client auto disconnected after 20 seconds,the reason is that vpn client assigned a wrong office mode ip address ,the address segment is not the ip segment i configred .I found a sk said that "vpn ipafile_check $FWDIR/conf/ipassignment.conf detail" more than1024 users , but there is only 65 users:
Line 0059 ignored because it is empty
Line 0060 ignored because it is empty
Line 0061 is a comment (starts with #)
Line 0062 is a comment (starts with #)
Line 0063 is a comment (starts with #)
Line 0064 is a comment (starts with #)
Line 0065 ignored because it is empty
Could not read line 66 in conf file - maybe EOF
I can not find the root case, ple help,thanks!
Accepted Solutions
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
That's consistent with users installing the client as SecuRemote, which does NOT support Office Mode.
If they reinstall and choose Check Point Mobile, it should work.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
Is this a locally managed SMB appliance?
If so, I don’t believe this works.
It does work on centrally managed ones, or should.
Regardless, I would open a TAC case.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
This is locally managed SMB appliance.Less than 20 users.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I would trust what phoneboy says, as he is Check Point God :). Anyway, not sure if this ever worked for you, but I know specifically for 20 seconds disconnect issue, I recall TAC always used to recommend to check option under gateway properties, vpn -> office mode and then 'support multiple external interfaces" or something like that, cant recall now. But, maybe open TAC case, does not hurt to confirm for sure.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I have just only one ISP link.
I also try to enable multiple interfaces in office mode,as following:
Even though I enable this feature,but still no working,I still assigned wrong office mode ip segment that is not what I configured
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
So what subnet is the office mode and what IP addresses are the users getting?
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
configured office mode ip :172.16.10.0/24
users getting ip : 192.168.0.0/24
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
That's consistent with users installing the client as SecuRemote, which does NOT support Office Mode.
If they reinstall and choose Check Point Mobile, it should work.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
I was just about to write what @PhoneBoy said...is it possible users are installing securemote? You can have them check by right clicking the vpn icon, help and then about, see what it shows. I dont know much about locally managed SMB appliances, but hard to imagine office mode would not work.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
SMB appliances include a certain number of remote access clients similar to Mobile Access Blade without the web-based portal.
Yes, it supports Office Mode 🙂
