topic Re: Static IP's for VPN Users? in General Topics

Static IP's for VPN Users?

rob.burgoyne — Thu, 24 Apr 2014 22:57:41 GMT

I have a customer that is asking if its possible to assign static addresses to VPN users. This is required because of existing upstream firewalls that have ACLs tied to source IP addresses. This is done so that users can VPN into the network and then gain access to specific resources that are managed by a different group. I was wondering if anyone has ran into this scenario before and if there was a solution. I was also wondering if it was possible for VPN users to get DHCP from a DHCP server instead of the PAN Firewall. It doesn't look like this is possible but I thought I would check.

Thanks,

Re: Static IP's for VPN Users?

gcapuno — Wed, 30 Apr 2014 06:16:22 GMT

Rob,

This feature is currently not available. You can contact your SE to request it as a future feature. Here is the link for a similar discussion of assigning static IP addresses to GP clients:
https://live.paloaltonetworks.com/message/20228#20228

Re: Static IP's for VPN Users?

Wbm — Mon, 11 Jan 2016 14:03:14 GMT

I think this feature is currently available in PAN 7.0. Check this
https://www.paloaltonetworks.com/documentation/70/pan-os/newfeaturesguide/globalprotect-features/static-ip-address-allocation.html