Forticlient SSL VPN on Fedora 17

[frood]

Hey,

I use the Forticlient SSL VPN for work. It connects OK on Fedora 17 but the server normally automatically pushes the routes to the client. This worked fine on F16 and below but appears broken in the new release.

Anyone else seeing this? Right now I have to run a script to add the routes after connecting.

[tomerazran]

Happened to me also..
Anyone solved this one?

[jpprade]

I got the same issue

it connects, but the route are missing.
I tryed with the latest version of forticlient but without success.

anyone found a solution ?

[jpprade]

I am looking at the connection log it tries to run a command like this to add the route :

route -n add -net 10.1.0.0 netmask 255.255.0.0 gw

this command seem to reply an error instead of doing what expected. Error message :

Syntaxe: inet_route [-vF] del {-host|-net} Cible[/prefix] [gw Gw] [metric M] [[dev] If]
inet_route [-vF] add {-host|-net} Cible[/prefix] [gw Gw] [metric M]
[netmask N] [mss Mss] [window W] [irtt I]
[mod] [dyn] [reinstate] [[dev] If]
inet_route [-vF] add {-host|-net} Cible[/prefix] [metric M] reject
inet_route [-FC] flush PAS supporté



Do you know what is wrong with this command ?

thanks !

[jpprade]

OK I found the problem.

it is because a parameter is missing when running the route command.

The command parsing ifconfig is returning an empty string

In the file :
sysconfig.linux.sh

you will found a line like that :

addr=`ifconfig $ifn |grep "inet"|awk ' {print $2 }'| awk -F : '{ print $2}'`

replace it by :

addr=`ifconfig $ifn |grep "inet"|awk ' {print $2 }'`

(I just removed the last piped awk)


And now it will works normally. The ifconfig command out maybe changed recently

[nevers]

Hi Frood,

in my company have just installed the Fortinet system and deployed clients for windows. How can I retrieve the client for Fedora 17? Somewhere there are also instructions for how to set it.

Thanks.

[jpprade]

Hello,

I usualy found it latest version here :


ftp://support.fortinet.com/FortiGate...tch_8/SSL-VPN/

you can browse the ftp for older version.

[apecross]

Thanks for your post, jpprade, it worked for me also!

[nevers]

It worked for me also. I have only modified sysconfig.linux.sh as suggested from jpprade. Thanks.

[CosmicLogick]

jpprade's solution
+1

[tomasrov]

jpprade solution works for me!!!

thanks.

[ilyasishak]

jpprade solution rocks!!!
Thanks a bunch.

[tonycurises]

may I know what is the user name and password of the ftp?


ftp://support.fortinet.com/FortiGate...tch_8/SSL-VPN/

[apecross]

ftp://pftpintl:F0rt1intl@support.fortinet.com