USGFLEX 100H - SecuExtender VPN client configuration with static ip client

giuseppeb

If I set a fixed client IP in child SA and disable retrieving parameters from the server, the VPN does not establish, and I get the message: "The gateway is configured to send the configuration."

How can I disable this restriction on the firewall? I need to set a static client IP.

Thank you

Zyxel_Melen

Hi @giuseppeb,

Please help me clarify:

1. Do you mean static IP for VPN or the client's LAN?
2. What's your configuration?

giuseppeb

I want in child SA set the VPN Client Address and disable request configuration from the gateway.

But receive the error 26, can't disable it. I want the client to always use the same vpn client address.

valerio_vanni

Could it be that you should use an IP outside given range? (but still within policy)

i.e. policy 192.168.50.0/24, provided range 192.168.50.100-200, try to set 192.168.50.80

(just an idea, I usually use static IPs for vpn clients so it's not something I tested)