VPN connection problem

[SOC_CSG]

Good afternoon, When we are in an external network (for example wifi ) with IP range 10.10.XXX.XXX, and our computers are trying to connect to VPN, which has the same pool address 10.10.XXX.XXX, they can not. The connection is not established . GlobalProtect Portal uses as connection method "user-logon (Always ON)" and INTERNAL HOST DETECTION is enabled. PanOs:6.1.5 GlobalProtect Client: 2.1.1 Could you indicate me what possible solutions exists? Best regards Gonzalo Arroyo

[abjain]

What do the client logs say? https://live.paloaltonetworks.com/t5/Management-Articles/How-to-Collect-Logs-from-GlobalProtect-Clie...

What error message do you get on the Status Panel when you are connecting?

Is this working from any other outside network and not just this external wifi?

Make sure you are able to reach and login to the Portal page using browser : https://<hostname>

[santonic]

I had a similar problem once. Assign a secondary pool of IP addresses for GP clients which won't overlap with that network. 

[SOC_CSG]

Hi Both

I sent this info to the end-user. I hope to receive a feedback in few days. I'll kept you both informed.

Best Regards

Gonzalo Arroyo

[santonic · Accepted solution]

I think you missunderstood. You need to configure secondary pool of IP address for GP on your PA device (assuming you are the PA admin)