topic Global Protect DHCP Pool utilisation in General Topics

Global Protect DHCP Pool utilisation

MarkusMix — Fri, 15 Jan 2021 12:15:00 GMT

Hiho,

I´d like to know how to see how much ipv4 adresses of the pool are in use or free so I need to know when to enlarge the pool.

That dhcp redirect doesn´t work I unfortunately recognized while searching the forum regarding dhcp and gp.

We are using always the prefered version of the 9er release.

I wasn´t able to find relevant information within admin guide nor online help.

Any tip is appreciated.

Stay healthy everybody.

Mick_Ball — Fri, 15 Jan 2021 14:08:37 GMT

from CLI:

show user ip-user-mapping all type GP

from GUI

Network/GlobalProtect/Gateways/Remote Users

for a history, select Previous User Tab

or run a custom report on detailed log/globalprotect and add "private IP"

MarkusMix — Wed, 20 Jan 2021 12:39:08 GMT

thank you for your response..

The cli showes 0 users.

The gui is not clear what is shown.

Are all users that are shown in the "previous user" do have active ip leases?
I guess this is not the case.

Also for the custome report I see all leases in a specific time.

I need to know how many ips are still free to serve for global protect clients endpoints.

I need only active leases not the historical view.

Any idea for this?

Mick_Ball — Wed, 20 Jan 2021 17:00:16 GMT

Edited... sorry just seen 0 users from cli.. are you using dhcp server or local client ip pools

anyhows... remote users/current users will display how many items... just subtract this from number of addresses in your pool...

from CLI:

show user ip-user-mapping all type GP

if you have 200 addresses in your pool and the above command shows "Total: 123 users"

then you will have 77 not used.

No, the previous users are not active leases but it will give an idea of how many are actually using the service.

MarkusMix — Thu, 21 Jan 2021 15:59:03 GMT

The cli command does not work as expected.

I have hundrets of users online, what I get from gui information, but the cli shows only 1 and mostly 0.

The custome report did the trick.

I created the report and set the time range to our login lifetime and private ip as you suggested.

Its not a smart solution but it works for now.

Anyway I would prefer using an external proxy where I can manage everything smoothly.