Saturday, June 29, 2013

Forticlient SSL VPN Routing Problem

Do you have to work with a Forticlient VPN SSL client from your Fedora? For me it was a total bummer because the official Linux client is discontinued and it seems that its latest version does not work properly on Fedora.

But that's not the problem. When I try to connect to a VPN through this application, it is successfully completed. Moreover, adds a network interface called 'ppp0'. For now, no problem.


So what's the problem? I can not ping to any machine in the network. After investigation and suspicions, I found that the connection does not route the requests. The following command solves this issue ({ip-address-from-adapter-ppp0} is replaced by the IP address from network adapter 'ppp0'):
route add default gw {ip-address-from-adapter-ppp0} ppp0



What does that do? It routes all traffic through the gateway connected to the network interface 'ppp0'.


The only problem is that you have to run this command every time you connect to the VPN. On my next post, I will post the script to automate this process. Problem solved!

14 comments:

buy vpn said...

Wow! after a long silence by our legend mimerth and contributor wenz they now offering again free vpn with 12 servers.

xirdneh said...

I don't know how old this post is but I have another solution.
Actually if you look into helper/forticlientsslvpn.log you will notice that theres a command failing. Basically is because the script sysconfig.linux.sh does not get the address of the interface ppp0 correctly. So the line 63 (or 64) which looks like this: addr=`ifconfig $ifn |grep "inet"|awk ' {print $2 }'| awk -F : '{ print $2}'`
should not have the las awk, so just modify it to this:
addr=`ifconfig $ifn |grep "inet"|awk ' {print $2 }'`
E Voilà...
Also, just on a side note the only forticlient executable for linux I could find is compiled for 32bit, if you try to execute it on your system and it fails with something like "executable does not exists" then it's because your system is on 64bit, you should download gcc-32 and glibc-32 and lib32-gtk so it can run.
Hope this saves some time to someone else.

Anonymous said...

I looked forever for a solution to this. Thank you.

Adrian said...

This tutorial worked me like a great cure of my SSL VPN routing problem. I was having complication sorting out such problem easily, therefore truly pleased to learn how things actually works on such Linux based platform. Thanks.

terselubung said...

thanks for the tutorial
cara mengetahui sisa pulsa im3

Jilian Moon said...

So many times these types of issues we face in dealing with the VPN services but the best things is you can find the solution very easily and the reason is there is a great work done by the top professional and their work is available here. you did a great work by having this post and I really like your idea. When I use DNS services it is good and easy for me to handle although VPN is also great to have in our working.

Pelangsing green slimming product fat said...

Vakum Tarik Pembesar Alat VitalCelana Vakoou Pembesar Alat Vital
Kondom Getar
Ring Cincin Silikon
Kondom Urat
Kondom Duri Silikon
Peninggi Badan Grow Up SuperPenggemuk Badan Kianpi Pil
Celana Hernia MagnetikPembesar Bokong
Pemutih Wajah TensungPemutih Badan Super Cepat
Obat Mata Katarak
Obat Diabetes Herbal AlkaromahObat Perapat Vagina
Minyak Lintah Papua
Cream Pembesar Payudara
Vakum Pembesar PayudaraObat Pelangsing Badan
Pelangsing FatlossPelangsing FruitObat Kuat Cialis
Plant Vigra GreenMaximum Powerful

Vimax Original said...

Boneka Full Body _ Boneka Full Body Terbaru


Pelangsing Green Slimming _ Pelangsing Badan Meizitang Original _ Jual Meizitang Asli _ Pelangsing Badan Fruit Plant


Obat vimax asli
Vimax
Toko Alat Bantu Sex
Vimax Asli
Toko Alat Bantu sex pria
Jual Vimax
Distributor Vimax
Boneka full body

Agen Vimax said...

Toko Vimax _ Agen Vimax _ Vimax Asli

Vimax Original _ Vimax Pembesar Penis _ Vimax Original _ Vimax Indonesia _ Agen Vimax Kalimantan
Neosize XL Original _ VigRX Plus Original _ Jual VigRX Plus Bandung

Semenax Original _ Semenax Penyubur Sperma

Viagra usa 100mg _ Viagra Original Asli _ Vimax Pembesar Penis _ Obat Kuat Viagra Bandung

Perangsang DH2O _ Obat Perangsang Spanish Fly _ Obat Perangsang Sexdrop _ Obat Perangsang Potenzol Cair _ Perangsang Permen Karet _ Permen Karet Perangsang Cewek _ Permen Karet Perangsang

Agen Vimax Asli said...

Www.klinikPembesarpenis.Com
Pusat Obat Kuat Sex Pria - Obat Alat Pembesar Penis - Alat Bantu Sex Pria Dan Wanita - Obat Pelangsing Badan Herbal, Dll...


Tersedia Juga :

Obat Kuat Sex Pria.
Obat Pembesar Penis.
Alat Pembesar Penis.
Minyak Pembesar Penis.
Alat Bantu Sex Pria.
Alat Bantu Sex Wanita.
Obat Pelangsing Badan.
Obat Penggemuk Badan.
Obat Penyubur Sperma.
Selaput Dara Buatan.
Pembesar Payudara.
Kesehatan Kecantikan.
Obat Pelangsing Tubuh ABC Acai Berry.

Kepuasan Customer Adalah Perioritas Bagi Kami. Terima Kasih
Selamat Berbelanja.

Agen Vimax Asli said...


Vimax Asli Original Canada Obat Pembesar Penis Alami

Vimax Asli Original Canada Obat Pembesar Penis Alami

Vimax Asli Original Canada Obat Pembesar Penis Alami

Vimax Asli Original Canada Obat Pembesar Penis Alami

Vimax Asli Original Canada Obat Pembesar Penis Alami

Vimax Asli Original Canada Obat Pembesar Penis Alami

Vimax Asli Original Canada Obat Pembesar Penis Alami

Vimax Asli Original Canada Obat Pembesar Penis Alami

Vimax Asli Original Canada Obat Pembesar Penis Alami

Vimax Asli Original Canada Obat Pembesar Penis Alami

Vimax Asli Original Canada Obat Pembesar Penis Alami

Vimax Asli Original Canada Obat Pembesar Penis Alami

Vimax Asli Original Canada Obat Pembesar Penis Alami

Vimax Asli Original Canada Obat Pembesar Penis Alami

Vimax Asli Original Canada Obat Pembesar Penis Alami

Vimax Asli Original Canada Obat Pembesar Penis Alami

Kadu said...

I had this solution implemented but recently my routes stopped working again, not sure if it's because my distribution (Arch) but after some debugging I found a couple of things.

1. The fix from xirdneh is no longer required on the latest version of forticlientsslvpn (which by the way also has a 64bit binary now)

2. The routes where not implemented because the command to get the addr was grabbing the IP twice, so the "route add" command was failing. The solution was simple, just pipe the command to uniq. The resulting line should look like this:

addr=`ip addr show $ifn | grep "inet" | tr '/' ' ' | awk '{ print $2 }' | uniq`

Kadu said...

Or, en even shorter version:

addr=`ip addr show $ifn | awk ' /peer/ { print $2 }'`

Leo Herbalis said...

Thank you for sharing in this article
I can learn a lot and could also be a reference
I hope to read the next your article updates
Vimax asli
Ciri-ciri Vimax Asli Canada
Vimax Original
Obat Pembesar Penis Herbal
Agen Vimax Original
Vimax Original

Content Licensed as Creative Commons CC-BY-SA 3.0 | Design by SEO Blogger Templates