topic Re: GlobalProtect IP address reservation for a MAC OS Clients in GlobalProtect Discussions

GlobalProtect IP address reservation for a MAC OS Clients

A_Adamski — Fri, 19 Jun 2020 10:58:59 GMT

Hello everyone,

Could anyone advise about how can I configure a GP client (MAC OS device) to get the same IP address?

I've found only an option for Widows OS devices, by editing the registry on the client's machine, but unfortunately, I can't find anything similar to MAC OS.

Also, I've found the option (2) described in the KB: HOW TO CONFIGURE A GLOBALPROTECT CLIENT TO GET THE SAME IP ADDRESS (https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA10g000000ClIMCA0)

I have a tiny problem with this workaround, as I understand in the case of multiple MAC OS GlobalProtect agents I will need to create an extra Gateway for each user/machine, right?

I want to check with you, if maybe someone had already some experience with it and could advise an alternative solution?
*Or do I need to submit the feature request?

I will appreciate your help and any good pointers in that mater.

Thank you all!

Re: GlobalProtect IP address reservation for a MAC OS Clients

Austin_Hardy — Thu, 18 Feb 2021 19:37:41 GMT

I have this same question on a Linux client. I need to set its preferred IP but I don't see where to set that. Every document I find references the Windows registry.

Re: GlobalProtect IP address reservation for a MAC OS Clients

Maciej_Z — Tue, 31 May 2022 12:59:04 GMT

configuring fixed ip address for globalprotect client is not as strightforward as documentation says. on windows there is no PrefferedIP, there is something similar to PreferredIP_acc89d3b1a6892f5cf1c75c1be67b39 - suffix is random and can change with time.

macos "registry" is located in /Library/Preferences, search for com.paloaltonetworks.GlobalProtect.settings.plist file. you'll find <key>PreferredIP_3bd959561172ae7b6e87801ffdd45e75</key> inside and it's value <string>10.200.200.150</string>.

i guess linux client store settings in a similar way, i would start searching /etc.