topic Global Protect Gateway Client IP Pool Grayed Out in GlobalProtect Discussions

Global Protect Gateway Client IP Pool Grayed Out

KAckerman12 — Thu, 25 Feb 2021 19:35:31 GMT

I am attempting to configure a global IP Pool for my gateway, however, the Client IP Pool tab is always grayed out. I followed the documentation and I have tunnel mode enabled with a tunnel interface assigned, yet the tab remains grayed out. Any help is greatly appreciated.

Re: Global Protect Gateway Client IP Pool Grayed Out

Mick_Ball — Fri, 26 Feb 2021 12:20:32 GMT

The only time i have seen this greyed out is when a range is already set in the Agent\Client Settings\IP Pools

Re: Global Protect Gateway Client IP Pool Grayed Out

KAckerman12 — Fri, 26 Feb 2021 17:19:12 GMT

I suspected that may be the case, but wasn't 100% sure. I do already have an IP pool configured under the Client Settings. I will work on recreating the gateway without these settings to see if that works. Thank you for the suggestion.

Edit: Can confirm this is correct. The Client IP Pool tab is available when there are no Client Settings configured.

Re: Global Protect Gateway Client IP Pool Grayed Out

ice-quake — Wed, 26 May 2021 17:40:09 GMT

When I attempt to clear the Agent\Client Settings\IP Pools the dialog box won't let me save (hit OK) and the message is "require at least on entry."

Re: Global Protect Gateway Client IP Pool Grayed Out

ice-quake — Wed, 26 May 2021 20:01:40 GMT

Turns out you can't modify the existing gateway config to use the "Client IP Pool" - i.e. if you already have a config for Agent\Client Settings\IP Pools you'll need to create a new gateway in order to use the "global" client IP pool. This needs to be configured first and then the "Client Settings."