topic Re: IP pool problem in General Topics

IP pool problem

Marivi — Mon, 24 Sep 2018 10:58:23 GMT

Hello,

I have an IP pool for GP users and IP are no being clearing when users disconnect the VPN, to clear this IPs we have to reboot the FW,

Is there other way to clear this addres ?

this must be cleared automatically after disconnect?

Regards

Re: IP pool problem

kiwi — Mon, 24 Sep 2018 12:46:39 GMT

Hi @Marivi,

Can you clarify ?

Are you still seeing the user to IP mapping ?

Cheers,

-Kiwi.

Re: IP pool problem

VinceM — Mon, 24 Sep 2018 14:01:02 GMT

Hi,

On my side it works.

Which version have you in your palo ?

Re: IP pool problem

Marivi — Mon, 24 Sep 2018 14:43:50 GMT

hello,

7.1.16 ...

Re: IP pool problem

Marivi — Mon, 24 Sep 2018 14:44:21 GMT

hello,

don't see users

Re: IP pool problem

BPry — Mon, 24 Sep 2018 14:52:48 GMT

@Marivi,

Are you seeing this anywhere within the Gateway informaiton or where exactly are you seeing the IP not getting released? I'm guessing that everyone needs a bit more information on what/where exactly you are seeing the IP not getting released.

Re: IP pool problem

Remo — Mon, 24 Sep 2018 15:28:24 GMT

Hmn ... is the IP even released? I never really thought about this, but my assumption was that the clients and the assigned IPs are cached till the pool is full. So when a client that was already connected normally gets the same IP and only if there are no more "free" IPs the firewall takes an IP from the "pool" of not connected devices.

Re: IP pool problem

BPry — Mon, 24 Sep 2018 15:39:04 GMT

@Remo,

I think everything you've said is the same thing that I've noticed in my testing. As long as the client is still present in the 'Previous Users' table they'll be assigned the same IP address each time they connect. I've never had a time were I've not had a big enough IP Pool, so I can't really speak on what happens if there aren't anymore 'free' IPs.

Re: IP pool problem

VinceM — Mon, 24 Sep 2018 15:42:05 GMT

Following @Remo remark.

@Marivi have you got more GP user than IP adress in the pool ?

Re: IP pool problem

Marivi — Tue, 02 Oct 2018 13:53:44 GMT

hello when I put the command > show user ip-user-mapping all, Doesn’t show any IP address from users over Global Protect.