Hi All, can someone help me with this please. I’m trying to assign individual IP address for remote access users. I want to assign an Ip address that isn’t in the IP pool range. What’s the best way to do this?

[Omar_Khalif]

something like this

https://www.fir3net.com/Firewalls/Check-Point/configuring-per-ip-assignment-using-ipassignmentconf-i...

[G_W_Albrecht]

You can read all about it in the Remote Access VPN Administration Guide R80.10 p.54ff !

ipassignment.conf works with identified users - for other situations, you can use an IP Pool, a DHCP or RADIUS server or IP Assignment Based on Source IP Address using the $FWDIR/conf/user.def.

[Omar_Khalif]

Thanks for your reply.  I'm using Winscp to log into the firewall. I've edited the file $FWDIR/conf/ipassignment.conf  with the changes I want. Then I made sure I installed l the policy on the Smart Dashboard . 

But when I want to check the file I get an error message on the command prompt on Winscp .

File cannot be found when I run this command  vpn ipafile_check ipassignment.conf detail. 

Can you help?

[G_W_Albrecht]

Besides the vpn ipafile_check ipassignment.conf command - does OM IPs get assigned to the users as defined ?

Do you run the command directly in WinSCP ? I always use WinSCP to open CLI in PuTTY. Also, rather use # vpn ipafile_check $FWDIR/conf/ipassignment.conf detail - maybe just the path is needed

[Omar_Khalif]

I've edited the file and run the # vpn ipafile_check $FWDIR/conf/ipassignment.conf detail - and it worked fine. It says the line is okay. But I'm still getting the ip address from the ip pool range instead of the assigned ip address from the file. 

[G_W_Albrecht]

First, $FWDIR/conf/ipassignment.conf is checked for the user name - can you see in SVTracker the User log in with that name ? This has worked as long as i can think of CP products...

The main ressource (apart from RA VPN Admin Guide) is sk33422 Office Mode IP and ipassignment.conf file; an addition can be found in sk116415 Machine Authentication IP assignment using ipassignment.conf not working. Possible pitfalls can be found in sk116603 and sk105162 (depending also on version).

[G_W_Albrecht]

Any success yet ?