Assign fixed IP to a VPN user on Spark 1570

[jorgemsassuncao]

Hello,
I have a Spark 1570 with build R81.10.05 and it is connected to the AD, is there a way to assign a fixed IP to a specific VPN user?

VPN users authenticate through AD.
Best regards.

[PhoneBoy · Accepted solution]

Yes via the ipassignment.conf file.
See: https://support.checkpoint.com/results/sk/sk33422

[jorgemsassuncao]

Hello,

I'm not finding the ipassignment.conf file, there in the SMB?
I have a Spark 1570.

[the_rock]

Should be same location...$FWDIR/conf/ipassignment.conf

[the_rock]

As @PhoneBoy said, just modify that file. Below is what it looks like by default.

Andy

 

[jorgemsassuncao]

Hello,
I'm new to this and I'm having a hard time finding the way you're suggesting.

[just13pro]

Make sure you are login to the Gateway CLI and NOT Management CLI.

Go to the path mentioned above and modified the file ipassignment.conf

[jorgemsassuncao]

Hello,
I think these gateways (1500 series) do not have or do not allow access to this file.

[PhoneBoy]

Yes they do.
Here's a screenshot from my own 1590 that definitely has this file:

Further, sk33422 references Embedded Gaia explicitly.

[jorgemsassuncao]

Hello @PhoneBoy 

Sorry, I wasn't logged in with expert mode.

Now I was able to access the file and made the change I want by adding the IP and user and saving the change.
Then when I try to connect the vpn with the user in question, the assigned IP continues to be by dhcp and not the IP that I specified for the user.

Any suggestions of what might be missing?

Gateway Type IP Address User Name
============= ===== ======================================== =======================
*      addr     192.168.125.1     ServidorBackup
*      addr     192.168.125.2     infodinamicavpn

[PhoneBoy · Accepted solution]

Manual changes to this file require reinstalling the security policy to take effect.
If this device is centrally managed, install the security policy.
If the device is locally managed, you can do one of two things:

• Make some other change to the access policy via clish/WebUI which will trigger a recompile of the policy.
• Use the expert command fw_configload

[jorgemsassuncao]

Thank you,

You help a lot.
Using the expert command fw_configload save the changes.