Easy routing workaround for Linux Fortinet SSL client

So you have your Fortinet Linux SSL VPN client, you setup your credential, fire up the connection, it connects, then you do not have access to any of your machines on your private vpn.

Schermata del 2014-12-04 09:49:21

Nasty.

You can see sent and received byte numbers flipping on the forticlient window, but you go nowhere.

Errrr!!! Routing problems.

Go either in your 64bit or 32bit client directory and edit

sysconfig.linux.sh

Look for the following line:

addr=`ip addr show $ifn | grep "inet" | tr '/' ' ' | awk '{ print $2 }'`

and change it to:

addr=`ip addr show $ifn | grep -m 1 "inet" | tr '/' ' ' | awk '{ print $2 }'`

That’s it. It’s a simple matching problem.

As you can see in :

forticlientsslvpn.log

It fails to grep the IP address for the ppp0 interface and so, it fails to create a new route towards your private network.

Easy and nasty.