IPP.txt - two questions

Question

1) is there a way to the "ifconfig-pool-persist /var/run/ipp.txt" option? 
 
 2) more importantly I guess... what happens when the IPP.txt is full? In other words... does your allocated subnet have to be larger than the number of employees? 
 
 Let's say that I have 100 employees. If I use a /24, that will only give me 64 addresses. But that is 64 "concurrent" IP addresses at 1 time. However, b/c of the "pool-persist" option, if every user connects _at some point_, that entire block of 64 will be allocated. So what happens when user No. 65 tries to connect? Let's say that only 5 other users are currently connected, so there are plenty of IPs that could be used, but with the pool-persist on and the IPP.txt... will they actually get an IP and a connection?

BAlfson · Accepted Answer

You're right, so I [:P] looked at the man page... 
 --ifconfig-pool-persist file [seconds] Persist/unpersist ifconfig-pool data to file, at seconds intervals (default=600), as well as on program startup and shutdown. 
 Apparently, the UTM uses the default of 10 minutes, so you should be fine. 
 Cheers - Bob 
 PS Just a thought - the SSL VPN is very compute-intensive. I would urge you to consider using L2TP/IPsec if you expect to have dozens of folks connected and working simultaneously. You should discuss this with your reseller or Sophos Support.