37
votes
Accepted
getting Checkpoint VPN SSL Network Extender working in the command line
SNX build 800007075 from 2012, used to support the CheckPoint VPN from the Linux command line. So I tested it, and lo and behold, it still works with the latest distributions and kernel(s) 4.x/5.x.
So ...
- 57.1k
30
votes
Failed to request VPN secrets #3
In my case (In Debian 9 by Gnome 3.2) selecting the password option "Store the password for all users" in the VPN settings got it working. All other options produce the mentioned error.
- 748
27
votes
Accepted
PulseUI on Ubuntu 22.04 needs Chromium Embedded Browser, which doesn't download
While creating the post I found the instructions for manually installing CEF. I did (with root permissions):
/opt/pulsesecure/bin$ ./setup_cef.sh install
And verified with
/opt/pulsesecure/bin$ ./...
- 571
26
votes
WSL - DNS not working when connected to VPN
Resolved.
Ubuntu subsystem (WSL) could not resolve corporate and non corporate domains while on or off vpn.
Fixed.
Must create /etc/wsl.conf file and add an entry to kill the resolv.conf file from ...
- 361
22
votes
Use ssh with a specific network interface
I don't know when it was introduced but the OpenSSH client on RHEL7 has this in its manpage:
-b bind_address
Use bind_address on the local machine as the source address of the connection. ...
- 321
22
votes
Import VPN config files to NetworkManager from command line
I'm using nmcli version 1.2.6 and I can use it to import openvpn configs.
nmcli connection import type openvpn file ~/myconfig.ovpn
From now on even in NetworkManager UI my vpn is visible.
To ...
- 333
22
votes
How can I use openconnect in the background
To connect:
sudo openconnect --background <...>
To disconnect:
sudo killall -SIGINT openconnect
Using SIGINT gives the background process time to clean up the DNS configuration and exit ...
- 321
19
votes
Accepted
How to setup DNS manually on Linux?
DNS Config Under Linux
DNS usage on linux is done over a set of routines in the C library that provide access to the Internet Domain Name System (DNS). The resolver configuration file (resolv.conf) ...
- 14.7k
19
votes
WSL - DNS not working when connected to VPN
See here a workaround based on a conflict observed with IPv6 DNS Servers:
https://github.com/microsoft/WSL/issues/1350#issuecomment-742454940
Please note an important fact, and workaround:
The DNS ...
- 291
13
votes
Accepted
Use nmcli to modify VPN password?
Yes, you can modify the value of any property with nmcli. In this case, you would use:
nmcli con modify "myvpn" vpn.secrets "password=myverysecretpassword"
- 1,233
13
votes
getting Checkpoint VPN SSL Network Extender working in the command line
When working to install the Firefox official SSL VPN Extender interface in the question VPN SSL Network Extender in Firefox, I found out and solved some more pieces of the puzzle of this question.
...
- 57.1k
12
votes
IPSec over L2TP: received NO_PROPOSAL_CHOSEN error notify
When connecting as a Meraki Client VPN, it only supports protocols that have been removed from the Strongswan default protocol negotiation list (because the SWEET32 birthday attack is possible against ...
- 872
12
votes
Accepted
Is there a command line program to check IP location (for VPN)?
You can use ipinfo.io or ipstack.com services through curl:
curl --silent "https://ipinfo.io/ip"
similarly change ip to country to get your geographical location.
- 1,080
11
votes
Starting openvpn client as daemon - in debian
Use the Debian-supplied mechanism
Don't roll your own service units. Debian comes with a mechanism for scanning your OpenVPN configuration and making systemd services to match it. Use that.
Make a ...
- 69.9k
11
votes
Accepted
How can I use openconnect in the background
According to the Openconnect documentation, the option you would want to try would be:
-b,--background
Continue in background after startup
- 5,006
10
votes
Make local resources available when connected to Wireguard VPN
When you want to connect individual external hosts to a LAN via WireGuard, the three key things you need to do are:
Include the LAN's IP block (or at least the IP address of each individual LAN-side ...
- 666
9
votes
NetworkManager fails with "Could not find source connection"
I got this bug even weirder.
$ nmcli c up VPN
Error: Connection activation failed: Could not find source connection.
$ nm-applet # click icon, VPN, VPN
WORKS!
I learned that Network manager first ...
- 91
9
votes
NetworkManager fails with "Could not find source connection"
I had a long fight for this but this how I managed to find a workaround the issue in Ubuntu 18 using network-manager and GUI:
Download GUI packages
$ sudo apt-get install network-manager-openvpn ...
- 91
9
votes
Accepted
Wireguard not routing traffic from client to other servers on the network
After so many try and fail and brainstorming with wireguard IRC chanel guys, apparently I forgot to add a static route for 10.7.0.0/24 for each server behind wireguard. Ping goes to the server, but ...
- 293
9
votes
Accepted
How to set connection to down by default with nmcli
You will need to set the connection's autoconnect property to no:
nmcli connection modify <connection> connection.autoconnect no
- 1,710
8
votes
Failed to request VPN secrets #3
Not a solution, but a workaround. You can connect using the command line and also enter the username/password on the command line, therefore the secret agent is not needed.
nmcli connection
nmcli --...
- 181
8
votes
Accepted
strongSwan - gives error "no known IPsec stack detected, ignoring!"
That legacy check looks for /proc/net/pfkey. If not found, the code tries to load the af_key module via modprobe and then checks again. However, the PF_KEYv2 interface provided by the af_key module is ...
- 829
8
votes
What exactly does these ip lines do?
I know this question is kind of old, but I just spent hours piecing this together, so in case it helps others who find their way here, I'll take a stab at a not-too-technical answer.
There are a few ...
- 193
8
votes
How can I use openconnect in the background
Yes. -b is the option. But that just leads to the next issue: A clean disconnect then is not possible anymore. I mean, the only way to exit openconnect when it is in background is to kill the process. ...
- 81
8
votes
Wireguard not routing traffic from client to other servers on the network
I ran into the same problem - my server aka "Wireguard SRV" in rhe diagram (=Centos8, with iptables and ferm) doesn't route traffic.
The problem: I forgot to sysctl -w net.ipv4.ip_forward=1.
But that ...
- 201
8
votes
Wireguard not able to connect after a few minutes
Try using PersistentKeepalive = 25 option in [Peer] configuration block on both sides, for example:
Server:
[Peer]
PublicKey = _REDACTED_
AllowedIPs = 10.0.0.4/32
PersistentKeepalive = 25
Client:
[...
- 181
7
votes
OpenVPN - Socket bind failed on local address [AF_INET] IP:1194: Cannot assign requested address
Removing the "local" directive from the openvpn configuration file is not a proper solution. What if you require the openvpn daemon to bind to just one network interface, which is the whole point of ...
- 171
7
votes
Openconnect won't connect in Arch Linux
I just had this problem. The other solution didn't work for me, but after a bit of Googling, I found this thread which explains/hypothesize that the issue has been caused by pacman -Syu which has ...
- 779
7
votes
VPN SSL Network Extender in Firefox
These 2018 instructions are for older CheckPoint VPN pre R80 (R80.10?) releases. See the new accepted answer for newer VPN/firewalls.
Ultimately, I decided to settle on authenticating with Firefox+...
- 57.1k
7
votes
Accepted
SSH tunnel error for root: sys_tun_open: failed to configure tunnel (mode 1): Operation not permitted
The creation of a network interface requires root (or at least CAP_NET_ADMIN) privileges. The error message tells the client ssh command couldn't create the tun0 interface, as confirmed by this strace ...
- 37.5k
Only top scored, non community-wiki answers of a minimum length are eligible