Office Mode MAC assignment

[Hemps]

Hello,

We use a 3rd party for our DHCP assignment. It bases the leases on the MAC address.

We have noticed that Checkpoint is assigning a new MAC address on reboots and thus getting a new IP/lease assigned to it. This showed up when we ran out of IP's in our pool and saw a lot of machines had 2 or 3 leases.

We have our MAC address for DHCP allocation set to "Unique per machine".

I ran a test of being connected to the vpn and getting an IP, disconnected my connection and reconnected and had the same mac and got the same IP. I then rebooted my laptop and then I got a new mac and thus a new leased IP. Is this normal?

Is there a way of getting a more consistent MAC so a machine doesn't receive a new lease each time?

[Alex_Sazonov]

Hi @Hemps 

Please check this discussion https://community.checkpoint.com/t5/Remote-Access-VPN/Office-Mode-Algorithm-behind-quot-Unique-per-m...

BR,

Alexander S.

[the_rock]

Here is what it says about that option "unique per machine:...to me, the fact you got the same IP when reconnected sounds right. Upon reboot, it would make sense you got new MAC address, therefore, a new IP address as well. As far as more consistent MAC address, not sire if virtual IP might be an option there.

DHCP allocates IP addresses per MAC address. When VPN needs an Office Mode address, it creates a MAC address that represents the client and uses it in the address request. The MAC address can be unique per machine or per user. If it is unique per machine, then VPN ignores the user identity. If different users work from the same Remote Access client they are allocated the same IP address.