Global Protect Access routes

Reply
Highlighted
L1 Bithead

Global Protect Access routes

Hi,

I have question for access routes. We have configured global protect and advertised only one access route however after connecting to global protect VPN, we can see multiple access routes in client machine. Is there any other criteria for access routes to be advertised?

Highlighted
L5 Sessionator

Hi @gpandya ,

 

Specifying host/network under GP gateway --> Agent --> Split Tunnel --> Access route is the only configuration that is used to route traffic through Global Protect and for these host/networks, routes gets added on client system post connecting GP. No other criteria/configuration is required.

 

Kindly check this configuration again. And also try to connect GP VPN on other client system and check if you see same observations.

 

Mayur



Mayur
Highlighted
L4 Transporter

what other routes do u see on client ?

 

check gp client routing table ?

 

how are u advertising routes to client ?

SD-WAN | Cloud Networking | PCNSE | ICSI CNSS | MCNA | | CCNP | CCSA | SPSP | SPSX | F5-101 | CCIE-SEC-Attempted
Highlighted
L1 Bithead

Thanks Mayur & Mandar

We have set route in "Access route" TAB only.

Let say for example, we have defined 192.168.0.0/16 subnet in access route but we are getting multiple subnets in client machine like 192.168.1.0/23 and so on. There is no problem with connectivity of routes. Just we are getting multiple subnets on client machines when we do "Route Print"

 

Highlighted
L5 Sessionator

@gpandya,

 

Whats your PANOS and GP version?

 

Mayur



Mayur
Highlighted
L1 Bithead

Its

GP Version 5.1.2-25
PANOS - 9.1

Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the Live Community as a whole!

The Live Community thanks you for your participation!