This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

SSL VPN DNS-Problem

Hello,

i have a Problem with my clients which are connecting with SSL VPN client. At my Domain-Controller the clients became the same ips :-(

When Client R716 is connecting at 8 o Clock, he gets 10.242.2.10 then he disconnects and later Client R722 is connecting and the DNS entry is often the same ip.

Why? And what can i do?

Greetings

Alex

This thread was automatically locked due to age.

Scott_Klassen over 9 years ago

Are you talking about DNS or DHCP? You should set the DNS servers to be used by the clients at Remote Access > Advanced. As far as the IP assignment itself, see:
www.sophos.com/.../115930.aspx
community.sophos.com/.../55593
community.sophos.com/.../55411

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel
AlexanderMayer over 9 years ago

Good Morning,

at Remote Access -> Advanced i have the DNS-Server (DomainController) and the IP of the UTM9 right?
These SNAT: amayer (User Network) -> any -> int-LAN-MZV
amayer-10.243.2.113
These DNAT: int-LAN-MZV->any->amayer-10.243.2.113
amayer (user Network)

At the UTM9 my Client gets an IP 10.242.2.6 and this is what is shown as DNS-Entry at the Domaincontroller. When my client connects the next time he gets an other 10.242.2.xx IP. I have thaught that the DNS-Entry will ever be the 10.243.2.113, isnt it? How can i get the DNS-Entry at the DC only once, because it is shown many times:
Client R711 - 10.242.2.6 - 28.01.2016 - 8 o clock
Client R712 - 10.242.2.6 - 27.01.2016 - 7 o clock

Do you know what i mean?

greetings
Alex
Cancel
Vote Up 0 Vote Down

Cancel
BAlfson over 9 years ago in reply to AlexanderMayer

Hi, Alex, and welcome to the UTM Community!

Since the second user only gets that IP after the first user has signed off, there shouldn't be any problem. What difficulty is this causing you, or were you just worried that this might be an indication of a problem?

Cheers - Bob

Sophos UTM Community Moderator
Sophos Certified Architect - UTM
Sophos Certified Engineer - XG
Gold Solution Partner since 2005

MediaSoft, Inc. USA
Cancel
Vote Up 0 Vote Down

Cancel
AlexanderMayer over 9 years ago

Hi Bob,

thanks for your Answer. The Problem is, that in my Active Directory i have 2 Entrys with the same IP and then my Software-Management System is getting worry because it points on the Name of the client.

Can i make that the Client gehts every time the same ip for example?

Greetings
Alex
Cancel
Vote Up 0 Vote Down

Cancel
Scott_Klassen over 9 years ago

Unfortunately not. Per the first kb article I linked above, SSL remote access address assignment is dynamic only.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel
AlexanderMayer over 9 years ago

Then it is normal, that i get more DNS-Entrys with the same IP-Adress?? :-(

Greetings
Alex
Cancel
Vote Up 0 Vote Down

Cancel
Scott_Klassen over 9 years ago

Yes, as SSL VPN can only do dynamic addressing from the VPN Pool. In order to have static addressing for clients, you'd need to use either PPTP or L2TP, which allow addressing from a separate DHCP server, where you can do static entries/reservations.

__________________
ACE v8/SCA v9.3

...still have a v5 install disk in a box somewhere.

http://xkcd.com
http://www.tedgoff.com/mb
http://www.projectcartoon.com/cartoon/1
Cancel
Vote Up 0 Vote Down

Cancel