Hot!Lease period of ssl vpn ip address

Author
kt001
New Member
  • Total Posts : 3
  • Scores: 0
  • Reward points: 0
  • Joined: 2019/09/04 22:26:07
  • Status: offline
2021/09/28 01:03:40 (permalink)
0

Lease period of ssl vpn ip address

Is there a command to check or change the lease period of ssl vpn ip address?
 
I got an IP address reception error on an ssl vpn connection.
There is still room in the ssl vpn address.
In the past, the lease period when connecting has not expired, so I think it will result in an error.
 
FortiGate80E v6.2.3

Attached Image(s)

#1
Toshi Esumi
Expert Member
  • Total Posts : 2741
  • Scores: 273
  • Reward points: 0
  • Joined: 2014/11/06 09:56:42
  • Status: offline
Re: Lease period of ssl vpn ip address 2021/09/28 10:11:37 (permalink)
0
Check "get vpn ssl monitor" and see the second half under "SSL VPN sessions". That would show you the all IP addresses held by sessions.
If FortiClient is "disconnect"ed properly the session on the FGT side should be terminated and the IP is released. But if the FortiClient is closed without a disconnect, it's still up until idle timer ("set idle-timeout" under "config vpn ssl settings") times out. So you can control those dormant sessions from holding IPs by adjusting the timer.
 
post edited by Toshi Esumi - 2021/09/28 10:15:58
#2
FrancisSmith
New Member
  • Total Posts : 9
  • Scores: 0
  • Reward points: 0
  • Joined: 2021/10/02 18:46:47
  • Status: offline
Re: Lease period of ssl vpn ip address 2021/10/02 18:49:28 (permalink)
0
I would like to know more about this lease period VPN. Would you mind sharing more details? Thank you so much!
#3
Toshi Esumi
Expert Member
  • Total Posts : 2741
  • Scores: 273
  • Reward points: 0
  • Joined: 2014/11/06 09:56:42
  • Status: offline
Re: Lease period of ssl vpn ip address 2021/10/03 09:22:27 (permalink)
0
As I said it lasts only the tunnel is up.
#4
Jump to:
© 2021 APG vNext Commercial Version 5.5