topic Re: Global connect client connected but no IP address assigned in General Topics

Global connect client connected but no IP address assigned

JulijanKlancnik — Tue, 14 Mar 2017 20:06:34 GMT

I have this odd situation, global connect client successfully establish the connection with portal but in network area there is no IP address on virtual PAN network card. This is only happening with new users. Old users seems to have no problems.

I Have GP version 3.0.0-74 and PA-500.

Is anyone else having same isue? Every suggestion would be appriciated, I have allready spend a lot of time troubleshooting.

Re: Global connect client connected but no IP address assigned

glastra1 — Wed, 15 Mar 2017 19:29:35 GMT

Enable troubleshooting on the global protect client.

More information would be helpful.. Have you configured a global protect gateway? is it FQDN/IP? Has the global protect gateway an IP pool? Is the agent gateway configuration enabled for all the users or just for an specific group? Is the computer NIC in the same network as the IP pool?

regards,

Gerardo.

Re: Global connect client connected but no IP address assigned

BPry — Wed, 15 Mar 2017 20:06:39 GMT

Just a thought here but if new users are not experiencing any issues it sounds like the IPs being utilized are not set to expire the lease, since the old user has an existing lease they pickup the old IP that they have always had, new users are unable to grab an IP because the pool is exhausted. Not having any additional informaiton this is really the only thing I can think of.

Since I don't know where you are getting your addresses (ip Pool or Auth Server) there isn't much that I can say for troubleshooting. Has the box been restarted, I'm not sure what actual process hands out the IPs for GP but maybe someone else has that info.

Re: Global connect client connected but no IP address assigned

JulijanKlancnik — Thu, 16 Mar 2017 09:40:27 GMT

Hello, thank you for your replay. I'm getting IPs from GP portal dhcp pool. It's /24 subnet. And I really don't have much users (less than 10). How can I check for dhcp leases (I tried with: show dhcp server lease all - got no records).

Old clients can connect, problem is only on new clients (I have two remote users with same isue).

I've checked for user ip mapping on FW:

show user ip-user-mapping all | match "user"
x.x.x.41 vsys1 GP domain\user 2591894 2591894

So FW is serving the ip to the client, but on GP Client I have this:

You can see, that there is no IPv4 assigned on the GP Client.