New Member

Question

Unable to receive SSL VPN tunnel IP address (-30)

16 replies
102907 views

I have multiple users that are getting this error message intermittently. The users are connecting from India and my office is located in the U.S. There are plenty of IP addresses available in the pool. Could this be a internet bandwidth issue? Any suggestions would be greatly appreciated.

Thank you,

New Member

I high unlikely, how big is the pool? Are all users using the same pool or do you have multiple portal with unique defined pools for tunnel-mode

i.e

web portal USusers

pool ABC

web portal INusers

pool DEF

etc....

Ken

dblackwellAuthor

New Member

One portal 20 addresses 4 users.

New Member

Than your problem is not the pool size. Your problem is something else.

Staff

Hi Team,

To isolate what is causing the issue, we need these logs at the time of issue:

diag vpn ssl debug-filter src-addr4 a.b.c.d (where a.b.c.d is the remote public ip from which you are connecting ssl vpn)

diag debug application sslvpn -1

diag debug enable

Once the issue is reproduced, you can disable debug by executing this command "diag debug disable"

Please share logs with us, we will keep you posted.

Thought Leadership. Security Summit. Thursday, November 12th, PGA National Resort, Palm Beach Gardens, FL.

Thought Leadership. Security Summit. Thursday, October 8th. Disney's Grand Californian Hotel & SPA, Anaheim, CA.

Security Operations Summit: Modernize SecOps. Operate AI-Native.AMER: November 4 | 9:00 AM PST. India and SAARC: November 5 | 10:00 AM IST. EMEA: November 5 | 10:30 AM CET. APAC: November 5 | 11:00 AM SGT