topic VPN connection problem in General Topics

VPN connection problem

SOC_CSG — Mon, 15 Feb 2016 18:06:44 GMT

Good afternoon, When we are in an external network (for example wifi ) with IP range 10.10.XXX.XXX, and our computers are trying to connect to VPN, which has the same pool address 10.10.XXX.XXX, they can not. The connection is not established . GlobalProtect Portal uses as connection method "user-logon (Always ON)" and INTERNAL HOST DETECTION is enabled. PanOs:6.1.5 GlobalProtect Client: 2.1.1 Could you indicate me what possible solutions exists? Best regards Gonzalo Arroyo

Re: VPN connection problem

abjain — Tue, 16 Feb 2016 01:50:46 GMT

What do the client logs say? https://live.paloaltonetworks.com/t5/Management-Articles/How-to-Collect-Logs-from-GlobalProtect-Client/ta-p/59248

What error message do you get on the Status Panel when you are connecting?

Is this working from any other outside network and not just this external wifi?

Make sure you are able to reach and login to the Portal page using browser : https://<hostname>

Re: VPN connection problem

santonic — Tue, 16 Feb 2016 07:01:44 GMT

I had a similar problem once. Assign a secondary pool of IP addresses for GP clients which won't overlap with that network.

Re: VPN connection problem

SOC_CSG — Fri, 19 Feb 2016 10:28:34 GMT

Hi Both

I sent this info to the end-user. I hope to receive a feedback in few days. I'll kept you both informed.

Best Regards

Gonzalo Arroyo

Re: VPN connection problem

santonic — Fri, 19 Feb 2016 11:20:24 GMT

I think you missunderstood. You need to configure secondary pool of IP address for GP on your PA device (assuming you are the PA admin)