Home Page | Skip to Navigation | Skip to Content | Skip to Search | Skip to Footer

Home >   Check Point Forums >   Software Blades and Gateways >   Firewall & VPN Blades

Thread: Connection Failed: Office Mode IP Assignment failure

Welcome, Guest Help
Login Login
Guest Settings Guest Settings
This question is not answered. Helpful answers available: 2. Correct answers available: 1.


Permlink Replies: 10 - Pages: 1 - Last Post: Aug 25, 2011 9:09 PM by: KeithSalustro
Gerry Baldwin

Posts: 1
Registered: 7/13/09
Connection Failed: Office Mode IP Assignment failure
Posted: Feb 26, 2010 1:30 PM
 
  Click to reply to this thread Reply

We're running R70.2 on 2 clustered UTM devices. We have 10 people that telecommute and they connect with the R73 Endpoint Connect client.

I've heard on several occassions, from different users, that they receive the following message when trying to connect.

Connection Failed: Office Mode IP Assignment failure - all IP address were allocated or the user is not authorize to receive an IP address from the gateway

I looked at the cluster object and Office Mode is configured allocate IP addresses manually using the IP pool. Each cluster member points to the same network object. The network object is defined as 192.168.6.0/24.

What is CP giving this error? We have 254 addresses available for assignment and only 10 users.

Thanks.

Jefferson C. Conz

Posts: 1
Registered: 11/21/07
Re: Connection Failed: Office Mode IP Assignment failure
Posted: Apr 5, 2010 7:16 PM   in response to: Gerry Baldwin
 
  Click to reply to this thread Reply

I am having exactly the same problem.

Does somebody knows if I need any different license than the IPSEC blade one to make Endpoint Connect work?

I saw that on configuration I need do enable SSL Network Extender (as said on Endopoint Connect Admin Guide). Do I need a specific license for this? Do I need Endpoint Policy Management blade to use Endpoint Connect?

The biggest problem is that I can authenticate to the gateway, but there is no logs on SmartView Tracker to give me a clue of the reason that this problem is ocurring.

Thanks in advance.

Alexander Parub...

Posts: 8
Registered: 1/11/08
Re: Connection Failed: Office Mode IP Assignment failure
Posted: Apr 8, 2010 11:50 PM   in response to: Gerry Baldwin
 
  Click to reply to this thread Reply

Hello

It seems that everything's OK with your setup - you need either SecureClient (CPVP-VSC) or SecureAccess (CPEP-SA-1) license to use Office Mode

Peter Homberger

Posts: 5
Registered: 6/10/08
Re: Connection Failed: Office Mode IP Assignment failure
Posted: Jul 13, 2010 12:33 PM   in response to: Alexander Parub...
 
  Click to reply to this thread Reply

Hello Everybody

We have the same issue. Regardless of the license we have got CPVP-VSC and also CPEP-SA-1 installed. Also EVAL licenses couldn't fix our problem.

Cherio Peter

Daniel Martinez

Posts: 1
Registered: 9/1/10
Re: Connection Failed: Office Mode IP Assignment failure
Posted: Sep 1, 2010 2:33 AM   in response to: Peter Homberger
 
  Click to reply to this thread Reply

I am having exactly the same problem.

It's almost september. There is any fix?

I need this client to work in Windows 64 bits.

Thanks in advance.
Daniel

George Me

Posts: 1
Registered: 2/6/11
Re: Connection Failed: Office Mode IP Assignment failure
Posted: Feb 6, 2011 10:49 PM   in response to: Gerry Baldwin
 
  Click to reply to this thread Reply

Hi,
any solution for this issue? I encounter the same error message when trying to connect from a machine which runs Windows 7 64-bit, but from a different one with Win XP 32bit is working perfectly. From the win 7 I tried also running the program in different compatibility modes like Win xp SP2 or Win XP SP3 but without success.

Any hint or tip on this, would be greatly appreciated.
Thank you!

Brandon Ramsey

Posts: 43
Registered: 3/27/07
Re: Connection Failed: Office Mode IP Assignment failure
Posted: Mar 29, 2011 6:36 PM   in response to: George Me
 
  Click to reply to this thread Reply

Can anyone give me information about what EVAL license is necessary for office mode IP assignment, and where it should be attached in a Provider-1 environment?

I am receving the following from R75.10 EPS VPN client:
Connection Failed: Office Mode IP Assignment failure - all IP address were allocated or the user is not authorize to receive an IP address from the gateway

The following in tracker:
Information: OM: xxx tried to connect, but you have reached the number of purchased licenses.

And the following in vpnd.elg:
available_om_licenses: sc_lic : 0 sc_unlimit 0
available_om_licenses: Not enough licenses for new user, return failure.

So far I have created every available EVAL license and attached them both to the CMA and to the gateways. Next step is to begin creating licenses for the MDS level to see if that makes a difference.

If you know exactly which EVAL license should go where, that would save me some time and be greatly appreciated.

Thanks.

Brandon Ramsey

Posts: 43
Registered: 3/27/07
Re: Connection Failed: Office Mode IP Assignment failure
Posted: Mar 29, 2011 7:29 PM   in response to: Brandon Ramsey
 
  Click to reply to this thread Reply

Issue was resolved by applying the "CPSB-EP-VPN-25-EVAL" portion of the CPEP-25-EVAL bundle at the MDS level.

In SmartUpdate, license features show up as "CPVP-VPS-1-NGX CPVP-VSC-25-NGX"

saul cruz

Posts: 2
Registered: 8/16/11
Re: Connection Failed: Office Mode IP Assignment failure
Posted: Aug 17, 2011 1:11 AM   in response to: Brandon Ramsey
 
  Click to reply to this thread Reply

I don't get it, would you explain what to do to solve this issue please?

saul cruz

Posts: 2
Registered: 8/16/11
Re: Connection Failed: Office Mode IP Assignment failure
Posted: Aug 17, 2011 2:21 AM   in response to: Brandon Ramsey
 
  Click to reply to this thread Reply

What do you mean by applying the "CPSB-EP-VPN-25-EVAL" portion of the CPEP-25-EVAL bundle at the MDS level. I am kind of new on this! would you help me out! please!

KeithSalustro

Posts: 1
Registered: 9/8/08
Re: Connection Failed: Office Mode IP Assignment failure
Posted: Aug 25, 2011 9:09 PM   in response to: saul cruz
 
  Click to reply to this thread Reply

He means it was a licensing issue. He put on an eval license, which you can get from CheckPoint:
"EP" means EndPoint

Legend
Expert: 751 + pts
Advanced: 301 - 750 pts
Enthusiast: 101 - 300 pts
Novice: 0 - 100 pts
Check Point
Helpful Answer (5 pts)
Correct Answer (10 pts)