Skip to main content
kt001
kt001
New Member
September 28, 2021
Question

Lease period of ssl vpn ip address

  • September 28, 2021
  • 2 replies
  • 9152 views

Is there a command to check or change the lease period of ssl vpn ip address?

 

I got an IP address reception error on an ssl vpn connection. There is still room in the ssl vpn address.

In the past, the lease period when connecting has not expired, so I think it will result in an error.

 

FortiGate80E v6.2.3

2 replies

Toshi_Esumi
SuperUser
Toshi_Esumi
SuperUser
September 28, 2021

Check "get vpn ssl monitor" and see the second half under "SSL VPN sessions". That would show you the all IP addresses held by sessions.

If FortiClient is "disconnect"ed properly the session on the FGT side should be terminated and the IP is released. But if the FortiClient is closed without a disconnect, it's still up until idle timer ("set idle-timeout" under "config vpn ssl settings") times out. So you can control those dormant sessions from holding IPs by adjusting the timer.

 

FrancisSmith
FrancisSmith
New Member
October 3, 2021

I would like to know more about this lease period VPN. Would you mind sharing more details? Thank you so much!

Toshi_Esumi
SuperUser
Toshi_Esumi
SuperUser
October 3, 2021

As I said it lasts only the tunnel is up.

Terms & ConditionsAccessibility statement