Assign Fixed IP Address to Global Protect Users with ldap+radius

Showing results for 
Show  only  | Search instead for 
Did you mean: 
Please sign in to see details of an important advisory in our Customer Advisories area.

Assign Fixed IP Address to Global Protect Users with ldap+radius

L2 Linker

Hi all,

I've tried to assign a static ip address to global protect connection using this kb but it doesn't work.

The support says that if we have ldap auth for username/password and radius authentication for 2fa it can't work.

If this method really can't work, I've set the registry key as explained here


But this static ip is defined on the client, so the firewall could have already set this ip to another user.

Is correct to define an ip pool different from the network of the static ip address? It seems working but just to know if anyone has done this configuration before.


For example:

- ip pool

- fixed ip address


I think that 

- if a user doesn't have the registry key, it will take an address of the pool

- if a user has the key set, can take the address set in the registry key without having override problem


Is that correct?




  • 0 replies
Like what you see?

Show your appreciation!

Click Like if a post is helpful to you or if you just want to show your support.

Click Accept as Solution to acknowledge that the answer to your question has been provided.

The button appears next to the replies on topics you’ve started. The member who gave the solution and all future visitors to this topic will appreciate it!

These simple actions take just seconds of your time, but go a long way in showing appreciation for community members and the LIVEcommunity as a whole!

The LIVEcommunity thanks you for your participation!