| Description | This article describes that it is not possible to to receive VPN tunnel IP address (-30) despite IP pool is free. |
| Scope | FortiGate, SSL-VPN. |
| Solution |
Sometimes, it is difficutl to connect to SSLVPN and being thrown an error of 'Unable to receive VPN tunnel IP address (-30)'.
It is possible to check if there is any exhaustion of SSL-VPN IP pool by checking on the SSL-VPN user list with the following command:
Enable the debug of SSLVPN and ask the user to connect to the SSL-VPN:
# diag deb app sslvpn -1
It is possible to find that there is no user connected to SSL-VPN and the following error is shown in the debug log:
To resolve that, proceed to restart SSL-VPN service with the following command:
The user should be able to connect to SSL-VPN and obtain an IP successfully. |
