RE: [fw1-gurus] Constant disco/reconnects for Securemote users

["Falde, Kurt" <kfalde@xxxxxxxxxxxxx>]

 I'm getting messages along the lines of "Information: 	message: Same
SecuRemote IP (behind a NAT device) detected. Disconnecting user
'usernamehere' in favor of the new user" however I don't have another
user that is using the same internal IP address and when it does
reconnect another user it is the same exact user that it just
disconnected? I have a clustered (clusterxl) pair of SecurePlatform NG
AI r54 firewalls and am using NAT pools for the client VPN connections.
The nat pool I have defined is the same pool for each cluster member and
am wondering if the cluster should be the same IP range or a different
IP range for each cluster member however have not been able to really
find any definitive information on this :( ... Thanks for any help
anyone might be able to provide.


Kurt Falde
LandAmerica INFO1

----------------------------Confidentiality--------------------------
This E-mail is confidential.  It should not be read, copied, disclosed
or
used by any person other than the intended recipient.  Unauthorized use,
disclosure or copying by whatever medium is strictly prohibited and may
be
unlawful.  If you have received this E-mail in error please contact the
sender immediately and delete the E-mail from your system.
------------------------------------------------------------------------

-----Original Message-----
From: Brown, Jim [mailto:Jim.Brown@xxxxxxxxxxxxx] 
Sent: Friday, December 26, 2003 7:54 PM
To: Falde, Kurt; fw1-gurus@xxxxxxxxxxxxxxxxxx
Subject: RE: [fw1-gurus] Constant disco/reconnects for Securemote users

I've noticed this before if the Securemote users private IP addresses
are identical. This typically happens if they are using a device like a
Linksys router and it is performing NAT using the default DHCP ranges.
Have one of the users adjust their DHCP range on the device.

-----Original Message-----
From: Falde, Kurt [mailto:kfalde@xxxxxxxxxxxxx]
Sent: Monday, December 22, 2003 10:41 AM
To: fw1-gurus@xxxxxxxxxxxxxxxxxx
Subject: [fw1-gurus] Constant disco/reconnects for Securemote users



---------------------------------------------------------------------
FireWall-1 Gurus Mailing List (http://www.phoneboy.com/gurus)
To unsubscribe, mailto:fw1-gurus-unsubscribe@xxxxxxxxxxxxxxxxxx
For additional commands, mailto:fw1-gurus-help@xxxxxxxxxxxxxxxxxx