I'm using a different subnet for office mode and Ip pool. the file was
already in the modules, I just edited with vi. I've installed the policy but
I'm making tests and it's not receiving the ip from the file but from the
office mode pool.
Regards,
lino
-----Original Message-----
From: Mailing list for discussion of Firewall-1
[mailto:FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM] On Behalf Of Ray
Sent: Jueves, 20 de Abril de 2006 05:26 p.m.
To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
Subject: Re: [FW-1] ipassignment.conf
If that is the very last line, it's probably OK. I believe you did say you
put the file on the enforcement module manually, didn't you? This is one of
the rare files that does not get pushed from the management server; it must
be placed manually on the firewall itself.
What IP address is it assigning you? The one you select must be in a
completely different subnet from Office Mode or IP Pool NAT or whatever
you're using to assign IP addresses to other users.
Well, actually not, but it should be. Office Mode assigns IP addresses
sequentially. If you use .254 and only have a handful of users, you can get
away with using the same subnet. However yours ends in .9, which is pretty
low. It does not work like a DHCP resevation.
Ray
>From: Lino Eduardo Avila Rodríguez <leavila AT SCITUM.COM DOT MX>
>Reply-To: Mailing list for discussion of Firewall-1
><FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM>
>To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
>Subject: Re: [FW-1] ipassignment.conf
>Date: Thu, 20 Apr 2006 12:48:14 -0500
>
>
>When I do a vpn ipafile_check ipassignment.conf detail
>
>Everything looks ok and then at the end It gives me an error of End of
>File.
>
>Could not read line x in conf file - maybe EOF
>
>Is this correct? Or it should I do something?
>
>
>
>
>Best Regards,
>
>
>Lino Avila
>
>
>-----Original Message-----
>From: Mailing list for discussion of Firewall-1
>[mailto:FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM] On Behalf Of Ramki
>Security
>Sent: Jueves, 20 de Abril de 2006 06:19 a.m.
>To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
>Subject: Re: [FW-1] ipassignment.conf
>
>Also note that you cannot give an IP which is part of your encryption
>domain. You should use a totally different subnet (different from your
>officemode pool) for the ipassignment.conf to work.
>
>Regards,
>Ramki
>
>Lino Eduardo Avila Rodríguez wrote:
> > I have configured office mode and It works ok, the I edited the
> > ipassignment.conf file with one user to test it but It doesn't asign
> > me the ipaddress I want. I have installed the policy but the same
> > problem. What I wrote in the file is:
> >
> >
> > Gateway Type IP Address User Name
> > ============= ===== ==================================
> > =========================================
> >
> > * addr 10.36.1.9,dns=(10.90.1.174) INKEPR
> >
> >
> > Am I correct?
> >
> >
> >
> >
> > -----Original Message-----
> > From: Mailing list for discussion of Firewall-1
> > [mailto:FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM] On Behalf Of sin
> > Sent: Martes, 18 de Abril de 2006 01:41 p.m.
> > To: FW-1-MAILINGLIST AT AMADEUS.US.CHECKPOINT DOT COM
> > Subject: Re: [FW-1] ipassignment.conf
> >
> > Lino Eduardo Avila Rodríguez wrote:
> >>
> >>
> >> I have tried installing the policy and nothing happens.
> >>
> >> The I read somewhere you have to restart de cp services, but I
> >> don't know if it's going to work.
> >>
> >
> > why just not try and see if it works or not ?
> >
> > =================================================
> > To set vacation, Out-Of-Office, or away messages, send an email to
> > LISTSERV AT amadeus.us.checkpoint DOT com
> > in the BODY of the email add:
> > set fw-1-mailinglist nomail
> > =================================================
> > To unsubscribe from this mailing list, please see the instructions
> > at http://www.checkpoint.com/services/mailing.html
> > =================================================
> > If you have any questions on how to change your subscription
> > options, email fw-1-owner AT ts.checkpoint DOT com
> > =================================================
> >
> > =================================================
> > To set vacation, Out-Of-Office, or away messages, send an email to
> > LISTSERV AT amadeus.us.checkpoint DOT com
> > in the BODY of the email add:
> > set fw-1-mailinglist nomail
> > =================================================
> > To unsubscribe from this mailing list, please see the instructions
> > at http://www.checkpoint.com/services/mailing.html
> > =================================================
> > If you have any questions on how to change your subscription
> > options, email fw-1-owner AT ts.checkpoint DOT com
> > =================================================
> >
>
>=================================================
>To set vacation, Out-Of-Office, or away messages, send an email to
>LISTSERV AT amadeus.us.checkpoint DOT com
>in the BODY of the email add:
>set fw-1-mailinglist nomail
>=================================================
>To unsubscribe from this mailing list,
>please see the instructions at
>http://www.checkpoint.com/services/mailing.html
>=================================================
>If you have any questions on how to change your subscription options,
>email fw-1-owner AT ts.checkpoint DOT com
>=================================================
>
>=================================================
>To set vacation, Out-Of-Office, or away messages, send an email to
>LISTSERV AT amadeus.us.checkpoint DOT com
>in the BODY of the email add:
>set fw-1-mailinglist nomail
>=================================================
>To unsubscribe from this mailing list,
>please see the instructions at
>http://www.checkpoint.com/services/mailing.html
>=================================================
>If you have any questions on how to change your subscription options,
>email fw-1-owner AT ts.checkpoint DOT com
>=================================================
=================================================
To set vacation, Out-Of-Office, or away messages, send an email to
LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
=================================================
To set vacation, Out-Of-Office, or away messages,
send an email to LISTSERV AT amadeus.us.checkpoint DOT com
in the BODY of the email add:
set fw-1-mailinglist nomail
=================================================
To unsubscribe from this mailing list,
please see the instructions at
http://www.checkpoint.com/services/mailing.html
=================================================
If you have any questions on how to change your
subscription options, email
fw-1-owner AT ts.checkpoint DOT com
=================================================
|
