Created on 04-15-2020 11:54 PM Edited on 09-26-2024 06:33 AM By Jean-Philippe_P
Description
This article explains the 'unable to get VPN tunnel IP address (-30)' error and the solution while using Forticlient SSL VPN as the tool.
Solution
Navigate to SSL VPN settings, VPN -> SSL VPN settings, go to Tunnel mode client settings, and edit the 'Address range'.
Select the option 'Specify custom IP ranges'. Then hover on the address object 'SSLVPN_Tunnel_Addr1' and select the option to edit the address object.
Then edit the range according to the need, here in the below example have increased from 30 new IP addresses. So the new range is from 200 to 240.
Once the range has been edited, hit 'ok' and then hit 'Apply' to save these changes. Then new range can be seen on the GUI.
CLI:
config firewall address
show
edit "SSLVPN_TUNNEL_ADDR1"
set uuid 13249802-2c26-51ee-a70a-e26a1b0deec3
set type iprange
set start-ip 10.212.134.200
set end-ip 10.212.134.210
next
end
(SSLVPN_TUNNEL_ADDR1) # set end-ip 10.212.134.240
(SSLVPN_TUNNEL_ADDR1) # end
After updating the range, any new user should be able to connect to SSL VPN via tunnel mode (FortiClient).
The Fortinet Security Fabric brings together the concepts of convergence and consolidation to provide comprehensive cybersecurity protection for all users, devices, and applications and across all network edges.
Copyright 2024 Fortinet, Inc. All Rights Reserved.