VPN SSL not using all range

[pierrec]

Hi,

I'm having an issue with one of my VPN portals.

I have a range of 20IP available for 5 accounts, so more than enough.

The range is from 10.3.0.78 to 10.3.0.99. Today, users get the IP from 10.3.0.97-99 when connecting.

When a fourth user try to connect, he get the error no more IP available.

If I'm looking the range usage over the last mounth, the fotigate gradually gave IP towards the end of the range. (all capture are anonymised)

I'm using a 1500D in 6.0.14.

Over 50 portals for diverse clients, this is the only one with this issue.

Here is the configuration :

• Portal :

• VPN Settings :

• Policy :

[jintrah_FTNT]

Hello there,

The symptoms appears to match a known issue #745499 resolved in 6.2.10 FortiOS Release Notes | FortiGate / FortiOS 6.2.10 | Fortinet Documentation Library , hence you may want to upgrade and check the behaviour or open a FortiCare ticket for issue validation before further actions.

Best regards,

Jin

[pierrec]

It's true that this issue could match with my problem.

What's weird is that this is the only portal doing that over 50 portals.

Is it possible that it's the forticlient the user use that is doing this ?

To temporarly bypass this problem, I've affected a new range of 254 IP. They are already not using the 2-3 first IPs.

What's sure is that I can't upgrade the firewall now only for this issue.

[jintrah_FTNT]

Hi,

The issue which I mentioned is not related to FortiClient. Good that you increased the range so that IP addresses are available for lease. Another option may be to release stale connections using #exec vpn sslvpn del-tunnel <tunnel index> , so the IP can be reused.

best regards,

Jin