38 votes
Accepted

getting Checkpoint VPN SSL Network Extender working in the command line

SNX build 800007075 from 2012, used to support the CheckPoint VPN from the Linux command line. So I tested it, and lo and behold, it still works with the latest distributions and kernel(s) 4.x/5.x. So ...
Rui F Ribeiro's user avatar
28 votes

Failed to request VPN secrets #3

In my case (In Debian 9 by Gnome 3.2) selecting the password option "Store the password for all users" in the VPN settings got it working. All other options produce the mentioned error.
shgnInc's user avatar
  • 728
26 votes

WSL - DNS not working when connected to VPN

Resolved. Ubuntu subsystem (WSL) could not resolve corporate and non corporate domains while on or off vpn. Fixed. Must create /etc/wsl.conf file and add an entry to kill the resolv.conf file from ...
Blusteel408's user avatar
22 votes

How can I use openconnect in the background

To connect: sudo openconnect --background <...> To disconnect: sudo killall -SIGINT openconnect Using SIGINT gives the background process time to clean up the DNS configuration and exit ...
Saintali's user avatar
  • 321
21 votes

Import VPN config files to NetworkManager from command line

I'm using nmcli version 1.2.6 and I can use it to import openvpn configs. nmcli connection import type openvpn file ~/myconfig.ovpn From now on even in NetworkManager UI my vpn is visible. To ...
bastian's user avatar
  • 323
21 votes
Accepted

PulseUI on Ubuntu 22.04 needs Chromium Embedded Browser, which doesn't download

While creating the post I found the instructions for manually installing CEF. I did (with root permissions): /opt/pulsesecure/bin$ ./setup_cef.sh install And verified with /opt/pulsesecure/bin$ ./...
noname's user avatar
  • 461
20 votes

Use ssh with a specific network interface

I don't know when it was introduced but the OpenSSH client on RHEL7 has this in its manpage: -b bind_address Use bind_address on the local machine as the source address of the connection. ...
ugob's user avatar
  • 301
18 votes
Accepted

How to setup DNS manually on Linux?

DNS Config Under Linux DNS usage on linux is done over a set of routines in the C library that provide access to the Internet Domain Name System (DNS). The resolver configuration file (resolv.conf) ...
intika's user avatar
  • 14.4k
17 votes

WSL - DNS not working when connected to VPN

See here a workaround based on a conflict observed with IPv6 DNS Servers: https://github.com/microsoft/WSL/issues/1350#issuecomment-742454940 Please note an important fact, and workaround: The DNS ...
Donatello's user avatar
  • 271
13 votes
Accepted

Use nmcli to modify VPN password?

Yes, you can modify the value of any property with nmcli. In this case, you would use: nmcli con modify "myvpn" vpn.secrets "password=myverysecretpassword"
gmarmstrong's user avatar
  • 1,233
13 votes

getting Checkpoint VPN SSL Network Extender working in the command line

When working to install the Firefox official SSL VPN Extender interface in the question VPN SSL Network Extender in Firefox, I found out and solved some more pieces of the puzzle of this question. ...
Rui F Ribeiro's user avatar
12 votes

IPSec over L2TP: received NO_PROPOSAL_CHOSEN error notify

When connecting as a Meraki Client VPN, it only supports protocols that have been removed from the Strongswan default protocol negotiation list (because the SWEET32 birthday attack is possible against ...
dragon788's user avatar
  • 852
12 votes
Accepted

Is there a command line program to check IP location (for VPN)?

You can use ipinfo.io or ipstack.com services through curl: curl --silent "https://ipinfo.io/ip" similarly change ip to country to get your geographical location.
Zeta.Investigator's user avatar
11 votes

Starting openvpn client as daemon - in debian

Use the Debian-supplied mechanism Don't roll your own service units. Debian comes with a mechanism for scanning your OpenVPN configuration and making systemd services to match it. Use that. Make a ...
JdeBP's user avatar
  • 68.8k
11 votes
Accepted

How can I use openconnect in the background

According to the Openconnect documentation, the option you would want to try would be: -b,--background Continue in background after startup
GracefulRestart's user avatar
10 votes
Accepted

How to automatically fetch new name server on VPN connect

The OpenVPN package has a script for this in /etc/openvpn/update-resolv-conf. You need to configure it with: script-security 2 up /etc/openvpn/update-resolv-conf down /etc/openvpn/update-resolv-conf ...
ysdx's user avatar
  • 1,873
10 votes

Make local resources available when connected to Wireguard VPN

When you want to connect individual external hosts to a LAN via WireGuard, the three key things you need to do are: Include the LAN's IP block (or at least the IP address of each individual LAN-side ...
Justin Ludwig's user avatar
9 votes

NetworkManager fails with "Could not find source connection"

I got this bug even weirder. $ nmcli c up VPN Error: Connection activation failed: Could not find source connection. $ nm-applet # click icon, VPN, VPN WORKS! I learned that Network manager first ...
nmh's user avatar
  • 91
9 votes

NetworkManager fails with "Could not find source connection"

I had a long fight for this but this how I managed to find a workaround the issue in Ubuntu 18 using network-manager and GUI: Download GUI packages $ sudo apt-get install network-manager-openvpn ...
user117001's user avatar
9 votes
Accepted

Wireguard not routing traffic from client to other servers on the network

After so many try and fail and brainstorming with wireguard IRC chanel guys, apparently I forgot to add a static route for 10.7.0.0/24 for each server behind wireguard. Ping goes to the server, but ...
dovla110010101's user avatar
8 votes

Failed to request VPN secrets #3

Not a solution, but a workaround. You can connect using the command line and also enter the username/password on the command line, therefore the secret agent is not needed. nmcli connection nmcli --...
Istvan Devai's user avatar
8 votes
Accepted

strongSwan - gives error "no known IPsec stack detected, ignoring!"

That legacy check looks for /proc/net/pfkey. If not found, the code tries to load the af_key module via modprobe and then checks again. However, the PF_KEYv2 interface provided by the af_key module is ...
ecdsa's user avatar
  • 819
8 votes

What exactly does these ip lines do?

I know this question is kind of old, but I just spent hours piecing this together, so in case it helps others who find their way here, I'll take a stab at a not-too-technical answer. There are a few ...
Askeli's user avatar
  • 193
8 votes

How can I use openconnect in the background

Yes. -b is the option. But that just leads to the next issue: A clean disconnect then is not possible anymore. I mean, the only way to exit openconnect when it is in background is to kill the process. ...
forty2's user avatar
  • 81
8 votes

Wireguard not routing traffic from client to other servers on the network

I ran into the same problem - my server aka "Wireguard SRV" in rhe diagram (=Centos8, with iptables and ferm) doesn't route traffic. The problem: I forgot to sysctl -w net.ipv4.ip_forward=1. But that ...
akop's user avatar
  • 201
7 votes

OpenVPN - Socket bind failed on local address [AF_INET] IP:1194: Cannot assign requested address

Removing the "local" directive from the openvpn configuration file is not a proper solution. What if you require the openvpn daemon to bind to just one network interface, which is the whole point of ...
Brian Warren's user avatar
7 votes

Openconnect won't connect in Arch Linux

I just had this problem. The other solution didn't work for me, but after a bit of Googling, I found this thread which explains/hypothesize that the issue has been caused by pacman -Syu which has ...
Mehrad Mahmoudian's user avatar
7 votes

VPN SSL Network Extender in Firefox

These 2018 instructions are for older CheckPoint VPN pre R80 (R80.10?) releases. See the new accepted answer for newer VPN/firewalls. Ultimately, I decided to settle on authenticating with Firefox+...
Rui F Ribeiro's user avatar
7 votes
Accepted

SSH tunnel error for root: sys_tun_open: failed to configure tunnel (mode 1): Operation not permitted

The creation of a network interface requires root (or at least CAP_NET_ADMIN) privileges. The error message tells the client ssh command couldn't create the tun0 interface, as confirmed by this strace ...
A.B's user avatar
  • 36.6k
7 votes

Connect 2 sites (networks) with Wireguard

Both the sites have the same local network (192.168.1.0/24). This is a problem -- if you have 192.168.1.2 (say Device A1) in Site A wanting to connect to 192.168.1.3 (say Device B1) in Site B, 192....
Justin Ludwig's user avatar

Only top scored, non community-wiki answers of a minimum length are eligible