790 appliance remote access

[Omerav]

Hi,

I have manual managed 790 appliance.

Remote VPN configure on office mode with /24 subnet.

Users are getting a /32 subnet.

1.How can I assign /24 subnet?

2. How can I assign a reserved up for a user? 

[PhoneBoy]

What precise client was installed by the end user?
Meanwhile, for reserving an IP for a specific user, you can try: https://supportcenter.checkpoint.com/supportcenter/portal?eventSubmit_doGoviewsolutiondetails=&solut... 

[Omerav]

Hi Client was installed with version E83.10

https://supportcenter.checkpoint.com/supportcenter/portal/role/supportcenterUser/page/default.psml/m...

[G_W_Albrecht]

As an addtion to the sk, on SMB you use

/pfrm2.0/opt/fw1/conf/ipassignment.conf

[Omerav]

Hi Done that but no change occurred user still gets 10.0.0.2 and I cant see it on connected user tab

attached 

[Omerav]

Hi i've configured the ipassignment.conf file but no luck 

user keeps getting 10.0.0.2 address and not the address from the range I've configured and I also cant see it connected on the remote user connected tab on the gui.

something is weird with my VPN.

[PhoneBoy · Accepted solution]

If the client was installed as SecuRemote (it’s one of the choices upon installing), that sounds like the IP the client will get.
The client needs to be reinstalled as Check Point Mobile.

[Omerav]

Thanks you @PhoneBoy  another question, i want to reserve an IP for a user following the ipassignment.conf file but with no luck. 

[PhoneBoy]

An internal note in the SK I linked suggested this may not work on locally-managed SMB appliances.
You can try a TAC case, but I suspect you may be out of luck.

[Omerav]

Hi Client was installed with ver.E83.10

https://supportcenter.checkpoint.com/supportcenter/portal/role/supportcenterUser/page/default.psml/m...

what I'm trying to accomplish is to have access between nodes inside the VPN subnet.

[G_W_Albrecht]

I would contact TAC for the issue...

[Omerav]

problem solved after disabling nat for the VPN subnet and installing endpoint security VPN instead of remote secure access.

[Omerav]

another quick Q while were at it, I'm configuring S2S VPN to a PA device do I need to use vti ? and if yes how ?

[PhoneBoy]

Offhand, don’t know, but recommend creating a new thread for this question.

[Omerav]

Tx