IP pool problem

[Marivi]

Hello,

I have an IP pool for GP users  and IP are no being clearing when users disconnect the VPN, to clear this IPs we have to reboot the FW,

Is there other way to clear this addres ? 

this must be cleared automatically after disconnect?

Regards

[kiwi]

Hi @Marivi,

Can you clarify ?

Are you still seeing the user to IP mapping ?

Cheers,

-Kiwi.

[VinceM]

Hi,

On my side it works.

Which version have you in your palo ?

V.

[Marivi]

hello,

7.1.16 ...

[Marivi]

hello,

don't see users 

[BPry]

@Marivi,

Are you seeing this anywhere within the Gateway informaiton or where exactly are you seeing the IP not getting released? I'm guessing that everyone needs a bit more information on what/where exactly you are seeing the IP not getting released. 

[Remo]

Hmn ... is the IP even released? I never really thought about this, but my assumption was that the clients and the assigned IPs are cached till the pool is full. So when a client that was already connected normally gets the same IP and only if there are no more "free" IPs the firewall takes an IP from the "pool" of not connected devices.

[BPry]

@Remo,

I think everything you've said is the same thing that I've noticed in my testing. As long as the client is still present in the 'Previous Users' table they'll be assigned the same IP address each time they connect. I've never had a time were I've not had a big enough IP Pool, so I can't really speak on what happens if there aren't anymore 'free' IPs. 

[VinceM]

Hi

Following @Remo remark.

@Marivi have you got more GP user than IP adress in the pool ?

V.

[Marivi]

hello when I put the command > show user ip-user-mapping all, Doesn’t show any IP address from users over Global Protect.