Asign static IP (from LAN IP range and not VPN IP range) to VPN clients

Question

Hello 
 
 I followed this article: 
 https://support.sophos.com/support/s/article/KB-000038046?language=en_US 
 but the vpn client doesn't get the static ip on the lan IP range. 
 do you know how I can get sophos to either assign specific IP's on the VPN IP range to specific clients (and then just add special rules to thoses IPs) or get it to actualy masquerade the source address. 
 
 Thanks

emmosophos · Answer

Hello there, 
 Thank you for contacting the Sophos Community. 
 The client won&rsquo;t get a Static IP if you follow that KB, what that KB does, shows you how to masquerade the traffic to trick your app into think the traffic is coming from a specific IP. 
 I would recommend you upgrade to V19 you have an option in the SSL VPN Global Settings to assign static IPs. 
 Regards,

Vivek Jagad · Answer

Hello Mousse , Adding to what Wayne Folta & emmosophos said, this is a know issue: NC-66955 in v19 too. No more than one connection per user if the static IP address is configured. So if more than one connection is attempted, the first connection gets static IP and the subsequent connections get IP addresses from the dynamic pool. One IP address is configured for one remote access user, this IP address is persistent across disconnections. The IP address is one to one mapped to the remote access user.

Asign static IP (from LAN IP range and not VPN IP range) to VPN clients

Top Replies