Unable to assign IP addresses to Global Protect users using external DHCP server
512
Created On 01/26/26 09:57 AM - Last Modified 01/27/26 22:13 PM
Symptom
- GlobalProtect (GP) Gateway is configured to assign DHCP IP addresses to GP clients as documented.
- Global Protect client returns an error with IP assignment
- The packet capture does not show packets egressing the FW towards the DHCP server.
- gpsvc.log displays the following error:
[IPSVC]-[InitSocket]: Relay Sender Failed to Open Socket listen udp :68: bind: address already in use. Will retry"
Environment
- Palo Alto VM based Firewalls
- PAN-OS: 11.2.7-hx
- GlobalProtect (GP) App
- DHCP-based IP address assignment
Cause
Software Issue (PAN-280901)
.
Resolution
- Configure a static IP for the FW management interface.
- For permanent fix, upgrade the PAN-OS versions to 11.2.8, 12.1.2, 12.2.0 or later. These PAN-OS versions have the fix for the defect PAN-280901.