End-of-Life (EoL)

Static IP Address Assignment

You can now assign static IP addresses to your endpoints to help you locate and troubleshoot errors in IP address assignment.
Software Support
: Starting with GlobalProtect™ App 4.1
OS Support
: Windows 7 and later releases
You can now assign static IP addresses to your endpoints by configuring the
reserved-ipv4
or
reserved-ipv6
entries in the Windows Registry prior to GlobalProtect app installation or the
RESERVEDIPV4
or
RESERVEDIPV6
options in the Windows Installer (Msiexec) during GlobalProtect app installation. This feature ensures that the GlobalProtect tunnel IP addresses that you assign to your endpoints do not change, which enables you to locate and troubleshoot errors in IP address assignment.
With this feature, the
PreferredIP
and
PreferredIPV6
options are deprecated.
You must deploy Windows Registry settings before installing the GlobalProtect app so that the app can read the registry settings during installation.
The GlobalProtect app can only create a tunnel between the endpoint and gateway when the gateway returns the same reserved tunnel IP address that you have assigned to the endpoint. If the gateway does not return the reserved IP address, the GlobalProtect app displays the following error message:
Could not connect to the gateway with the specified tunnel IP address. Please contact your IT administrator.
  • Use the following steps to configure the
    reserved-ipv4
    or
    reserved-ipv6
    entry in the Windows Registry:
    1. Locate the Globalprotect app customization settings in the Windows Registry.
      1. Open the Windows Registry by entering
        regedit
        on the command prompt.
      2. Go to the following registry location:
        HKEY_LOCAL_MACHINE\SOFTWARE\Palo Alto Networks\GlobalProtect\Settings\
    2. Configure the reserved tunnel IP address to deploy to your Windows endpoint.
      1. Select
        Edit
        New
        String Value
        .
      2. When prompted, set the
        Name
        of the new registry entry to
        reserved-ipv4
        or
        reserved-ipv6
        .
      3. Right-click the registry entry and then select
        Modify...
        .
      4. Enter the IPv4 or IPv6 address in the
        Value data
        field.
      5. Click
        OK
        .
  • Use the following steps to configure the
    RESERVEDIPV4
    or
    RESERVEDIPV6
    option in the Windows Installer (Msiexec):
    1. Launch the command prompt.
    2. Enter one of the following commands to configure the reserved tunnel IP address for your Windows endpoint:
      • msiexec /i GlobalProtect.msi RESERVEDIPV4=”<reserved-ipv4>”
      • msiexec /i GlobalProtect.msi RESERVEDIPV6=”<reserved-ipv6>”

Recommended For You