<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:x="urn:schemas-microsoft-com:office:excel" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0cm;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;
mso-fareast-language:EN-US;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EstiloCorreo17
{mso-style-type:personal-compose;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
mso-fareast-language:EN-US;}
@page WordSection1
{size:612.0pt 792.0pt;
margin:70.85pt 3.0cm 70.85pt 3.0cm;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="ES" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal">Hi list!<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">It is my first post, and i have a question.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Im using the ShrewSoft Client to Site VPN on Linux. It connects to a firewall “Watchguard”. On the configuration, im using just 1 ip address for the pool of virtual addresses that the firewall assigns to the VPN client.<o:p></o:p></p>
<p class="MsoNormal">The problem is that after a reboot of the machine, it tries to connect again and it fails, and on the firewall we see an error that says:
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">"2017-01-11 16:55:12 CreditoDeLaCasa-XTM-515-1 iked ras_request_ip_from_addr_pool(): user vpn-soca-3 requests for an IP from address pool VPN-Soca-3_mp, but none is available"
<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">So, the firewall does not release the virtual IP address because it never receives the logout message.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Also, i performed some tests: at the time with the VPN client connected, if we disconnect the network cable, the firewall do receives the logout message and the IP is free for another connection from that user. The same occurs if we kill
the shrewsoft process. So the problema only occurs when the machine is restarted.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Does anyone has any clue on what may be happening and how to solve it?<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Thanks a lot! Regards.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size:10.0pt;color:#757B80;mso-fareast-language:ES">Federico Basso<br>
</span><span lang="EN-US" style="font-size:10.0pt;color:#757B80;mso-fareast-language:ES">CISSP - Consultor Seguridad IT</span><span lang="EN-US" style="font-size:10.0pt;color:#757B80;mso-fareast-language:ES"><br>
CODIC Seguridad IT <br>
Argentina I Espaņa I Uruguay <br>
t: +5411 52632230 I +3493 7243500 I +598 27066055 <br>
</span><span lang="EN-US" style="font-size:10.0pt;color:gray;mso-fareast-language:ES"><a href="http://www.codic.com.uy/"><span style="color:gray;text-decoration:none">www.codic.com.uy</span></a></span><span style="mso-fareast-language:ES"><o:p></o:p></span></p>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</body>
</html>