topic Re: How do you view IP Pool utilization to verify there's never more demand than available? in GlobalProtect Discussions

How do you view IP Pool utilization to verify there's never more demand than available?

palomed — Tue, 11 Jan 2022 23:20:45 GMT

In Gateway/Agent/Client Settings/IP Pools - have have four /24 networks configured for global protect to use.
How can I view how many of each of those address blocks or all of them are in use at one time? And is there

a way to what the maximum useage has been? Thank you.

Re: How do you view IP Pool utilization to verify there's never more demand than available?

nikoolayy1 — Thu, 13 Jan 2022 09:47:54 GMT

You test assigning another pool:

Solved: LIVEcommunity - GlobalProtect IP pool exhaustion / overflow to secondary IP pool? - LIVEcommunity - 316418 (paloaltonetworks.com)

Re: How do you view IP Pool utilization to verify there's never more demand than available?

palomed — Thu, 13 Jan 2022 22:52:23 GMT

I'm not sure I follow. I have four /24s configured and the assignments look pretty much random to my eye.

Re: How do you view IP Pool utilization to verify there's never more demand than available?

nikoolayy1 — Fri, 14 Jan 2022 14:31:09 GMT

If you want a static way to assign IP addresses look at:

Solved: LIVEcommunity - How to get the same ip address for global protect client - LIVEcommunity - 205028 (paloaltonetworks.com)

Select this option to enable the GlobalProtect gateway to assign fixed IP addresses by use of an external authentication server. When this option is enabled, the GlobalProtect gateway allocates the IP address for connecting to devices by using the Framed-IP-Address attribute from the authentication server.

Client Settings Tab (paloaltonetworks.com)

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClIMCA0

Re: How do you view IP Pool utilization to verify there's never more demand than available?

palomed — Fri, 14 Jan 2022 14:59:35 GMT

On a Cisco router the equivalent command might be "show ip dhcp bind" which would show a table of IP addresses assigned to what machine and are currently not available for assignment. I'm trying to find something similar at GUi or command line on the PAN to tell me the state of address availability for hand out.

Re: How do you view IP Pool utilization to verify there's never more demand than available?

alowther_chatham — Fri, 14 Jan 2022 19:24:00 GMT

Maybe one of these commands will be what you're looking for

show global-protect-gateway current-user

show global-protect-gateway statistics

show user ip-user-mapping all type GP

show user ip-user-mapping all option count type GP

We use the API to track the current-user count to keep track of usage trends.

Re: How do you view IP Pool utilization to verify there's never more demand than available?

palomed — Fri, 14 Jan 2022 19:30:04 GMT

Perfect. The last two used in combination verifies the #of IPs and users. Thank you.