Guest User!

You are not Sophos Staff.

Thread Info
  • State Not Answered
  • Locked Locked
  • Replies 7 replies
  • Subscribers 3 subscribers
  • Views 1999 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SSL VPN: Need to set client IP address

tedflo1

Hi all,

Using UTM 9 (v9.705-3) here. I recently finished setting up SSL VPN for Mac users (newer versions of macOS and iOS had issues connecting to L2TP/IPSec), and am experiencing a little issue.

When a user connects, they are not able to establish a remote desktop connection. Our workstations use the 255.255.240.0 subnet. 

When using the L2TP/IPSec connection method, I am able to specify an IP address ("RAS Address") for each user that needed it. Is there a way to do this for SSL VPN?

 



This thread was automatically locked due to age.
Parents
  • FormerMember
    0 FormerMember

    Hi ,

    Thanks for reaching out to the Community! 

    Are you looking for an option to set static IP addresses for the SSL VPN users? If yes, you could configure it under Definition & Users > Users & Groups > User and find the option called "Use static remote access IP". 

    Use static remote access IP (optional): Select if you want to assign a static IP address for users gaining remote access instead of assigning a dynamic IP address from an IP address pool. For IPsec users behind a NAT router, it’s mandatory to use a static remote access IP address.

    Reference screenshot: 

    Thanks,

Reply
  • FormerMember
    0 FormerMember

    Hi ,

    Thanks for reaching out to the Community! 

    Are you looking for an option to set static IP addresses for the SSL VPN users? If yes, you could configure it under Definition & Users > Users & Groups > User and find the option called "Use static remote access IP". 

    Use static remote access IP (optional): Select if you want to assign a static IP address for users gaining remote access instead of assigning a dynamic IP address from an IP address pool. For IPsec users behind a NAT router, it’s mandatory to use a static remote access IP address.

    Reference screenshot: 

    Thanks,

Children
Unfiltered HTML