Try   HackMD

在Linux使用Forticlient SSL VPN

要使用Forticlient的VPN可以直接使用Forticlient的GUI,但是那個package已經很久沒有更新了。
所以本文會介紹使用GNOME原生的VPN界面及openfortivpn新增VPN連線。

我的環境
OSManjaro Linux x86_64
Kernel5.7.17-2-MANJARO
DEGNOME 3.36.5

註1:其他DE也有類似的界面,位置可能稍有不同。
註2:本文使用海洋大學VPN為例。

1. 安裝套件

我在Arch base的Manjaro上所以使用pacman:

sudo pacman -S openfortivpn networkmanager-fortisslvpn

Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →

2. 新增Fortinet SSLVPN的設定

  1. 從GNOME的網路頁面裡面新增一個Fortinet SSLVPN
    Image Not Showing Possible Reasons
    • The image file may be corrupted
    • The server hosting the image is unavailable
    • The image path is incorrect
    • The image format is not supported
    Learn More →
  2. 填寫IP和使用者資訊並按下 "加入" 按鈕
    Image Not Showing Possible Reasons
    • The image file may be corrupted
    • The server hosting the image is unavailable
    • The image path is incorrect
    • The image format is not supported
    Learn More →

3. 取得憑證

完成上一步後如果直接啟動VPN可以連線的話就完成了,如果不能連線的話大概是因為沒有信任憑證。
輸入指令:

sudo openfortivpn <ip> --username=<name> --password=<pwd> | grep trusted-cert

Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →

把trusted-cert後面那一串放到剛剛的VPN設定>進階>信任憑證裡面

Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →

4. 完成啦

Image Not Showing Possible Reasons
  • The image file may be corrupted
  • The server hosting the image is unavailable
  • The image path is incorrect
  • The image format is not supported
Learn More →