Solved: Cannot get IP address on Pulse Client... How simpl...

Whizzer · ‎05-23-2020

Don't know what is going on here, but it feels like it happended all of a sudden.

Either the Pulse Secure Clients get an "unable to assign address" notification when I try to assign them an IP via DHCP, or the "network error" (error: 1115) is shown when I try to provide them with an IP address from a IP pool in the PCS itself.

The configuration is pretty straightforward

Policy tracing shows:

Info PTR23353 2020/05/23 16:13:45 - [213.265.354.133] - DOMAIN\whizzer(AD plus DuoSecurity)[] - Role restrictions successfully passed for roles: Home user sessions, Home admin sessions
Info PTR23362 2020/05/23 16:13:45 - [213.265.354.133] - DOMAIN\whizzer(AD plus DuoSecurity)[Home user sessions,Home admin sessions] - Sign-in successful, creating session
Info PTR23471 2020/05/23 16:13:45 - [213.265.354.133] - DOMAIN\whizzer(AD plus DuoSecurity)[Home user sessions,Home admin sessions] - VPN Tunneling: IP Address Pools obtained for the current session are 192.168.60.1-192.168.60.100
Info PTR24639 2020/05/23 16:13:45 - [213.265.354.133] - DOMAIN\whizzer(AD plus DuoSecurity)[Home user sessions,Home admin sessions] - VPN Tunneling: ACL rule [1] resource = *:*, action = ACCEPT
Info PTR23471 2020/05/23 16:13:51 - [213.265.354.133] - DOMAIN\whizzer(AD plus DuoSecurity)[Home user sessions,Home admin sessions] - VPN Tunneling: IP Address Pools obtained for the current session are 192.168.60.1-192.168.60.100
Info PTR24639 2020/05/23 16:13:51 - [213.265.354.133] - DOMAIN\whizzer(AD plus DuoSecurity)[Home user sessions,Home admin sessions] - VPN Tunneling: ACL rule [1] resource = *:*, action = ACCEPT
Info PTR23471 2020/05/23 16:16:30 - [213.265.354.133] - DOMAIN\whizzer(AD plus DuoSecurity)[Home user sessions,Home admin sessions] - VPN Tunneling: IP Address Pools obtained for the current session are 192.168.60.1-192.168.60.100
Info PTR24639 2020/05/23 16:16:30 - [213.265.354.133] - DOMAIN\whizzer(AD plus DuoSecurity)[Home user sessions,Home admin sessions] - VPN Tunneling: ACL rule [1] resource = *:*, action = ACCEPT
Info PTR23471 2020/05/23 16:16:36 - [213.265.354.133] - DOMAIN\whizzer(AD plus DuoSecurity)[Home user sessions,Home admin sessions] - VPN Tunneling: IP Address Pools obtained for the current session are 192.168.60.1-192.168.60.100
Info PTR24639 2020/05/23 16:16:36 - [213.265.354.133] - DOMAIN\whizzer(AD plus DuoSecurity)[Home user sessions,Home admin sessions] - VPN Tunneling: ACL rule [1] resource = *:*, action = ACCEPT
Info PTR23471 2020/05/23 16:16:42 - [213.265.354.133] - DOMAIN\whizzer(AD plus DuoSecurity)[Home user sessions,Home admin sessions] - VPN Tunneling: IP Address Pools obtained for the current session are 192.168.60.1-192.168.60.100
Info PTR24639 2020/05/23 16:16:42 - [213.265.354.133] - DOMAIN\whizzer(AD plus DuoSecurity)[Home user sessions,Home admin sessions] - VPN Tunneling: ACL rule [1] resource = *:*, action = ACCEPT
Info PTR23471 2020/05/23 16:16:53 - [213.265.354.133] - DOMAIN\whizzer(AD plus DuoSecurity)[Home user sessions,Home admin sessions] - VPN Tunneling: IP Address Pools obtained for the current session are 192.168.60.1-192.168.60.100
Info PTR24639 2020/05/23 16:16:53 - [213.265.354.133] - DOMAIN\whizzer(AD plus DuoSecurity)[Home user sessions,Home admin sessions] - VPN Tunneling: ACL rule [1] resource = *:*, action = ACCEPT
Info PTR23471 2020/05/23 16:17:04 - [213.265.354.133] - DOMAIN\whizzer(AD plus DuoSecurity)[Home user sessions,Home admin sessions] - VPN Tunneling: IP Address Pools obtained for the current session are 192.168.60.1-192.168.60.100
Info PTR24639 2020/05/23 16:17:04 - [213.265.354.133] - DOMAIN\whizzer(AD plus DuoSecurity)[Home user sessions,Home admin sessions] - VPN Tunneling: ACL rule [1] resource = *:*, action = ACCEPT
Info PTR23471 2020/05/23 16:17:15 - [213.265.354.133] - DOMAIN\whizzer(AD plus DuoSecurity)[Home user sessions,Home admin sessions] - VPN Tunneling: IP Address Pools obtained for the current session are 192.168.60.1-192.168.60.100
Info PTR24639 2020/05/23 16:17:15 - [213.265.354.133] - DOMAIN\whizzer(AD plus DuoSecurity)[Home user sessions,Home admin sessions] - VPN Tunneling: ACL rule [1] resource = *:*, action = ACCEPT
Info PTR23471 2020/05/23 16:17:31 - [213.265.354.133] - DOMAIN\whizzer(AD plus DuoSecurity)[Home user sessions,Home admin sessions] - VPN Tunneling: IP Address Pools obtained for the current session are 192.168.60.1-192.168.60.100
Info PTR24639 2020/05/23 16:17:31 - [213.265.354.133] - DOMAIN\whizzer(AD plus DuoSecurity)[Home user sessions,Home admin sessions] - VPN Tunneling: ACL rule [1] resource = *:*, action = ACCEPT
Info PTR23471 2020/05/23 16:17:47 - [213.265.354.133] - DOMAIN\whizzer(AD plus DuoSecurity)[Home user sessions,Home admin sessions] - VPN Tunneling: IP Address Pools obtained for the current session are 192.168.60.1-192.168.60.100
Info PTR24639 2020/05/23 16:17:47 - [213.265.354.133] - DOMAIN\whizzer(AD plus DuoSecurity)[Home user sessions,Home admin sessions] - VPN Tunneling: ACL rule [1] resource = *:*, action = ACCEPT
Info PTR23471 2020/05/23 16:18:03 - [213.265.354.133] - DOMAIN\whizzer(AD plus DuoSecurity)[Home user sessions,Home admin sessions] - VPN Tunneling: IP Address Pools obtained for the current session are 192.168.60.1-192.168.60.100
Info PTR24639 2020/05/23 16:18:03 - [213.265.354.133] - DOMAIN\whizzer(AD plus DuoSecurity)[Home user sessions,Home admin sessions] - VPN Tunneling: ACL rule [1] resource = *:*, action = ACCEPT

I already tried an upgrade towards 9.1R6, but it does not solve the problem.

What am I doing wrong here.. What is the simple thing I'm overlooking???

rdumitrescu · ‎05-24-2020

What do you see in event\users logs when you try to connect?

Do you use a PSA-V?

If yes, maybe this KB is suitable for you.

https://kb.pulsesecure.net/articles/Pulse_Secure_Article/KB44372/

View solution in original post

rdumitrescu · ‎05-24-2020