Checkpoint: Remote access VPN users recive IP addresses which are allocated in ipassignment.conf

After adding IP addresses to $FWDIR/conf/ipassignment.conf you can observe in smartlog that the IP addresses are beign assigned to other users. If you face with this problem, you have to use different networks for Officemode and ipassignment.conf. You can do it by subnetting the Officemode address pool or by using different networks.

Once you have different networks configured, if Antispoofing is enabled for Internet interface, you must to add the network used in $FWDIR/conf/ipassignment.conf to the exceptions for Antipoofing for that interface.

Leave a Reply

Your e-mail address will not be published. Required fields are marked *

This site uses Akismet to reduce spam. Learn how your comment data is processed.