Skip to main content
zoriax
zoriax
New Member
May 12, 2022
Question

FortiClient EMS : Per-Machine VPN

  • May 12, 2022
  • 2 replies
  • 1733 views

Hi everyone !


I'm a bit confuse on per-machine VPN and <machine> tag on FortiClient configuration. Let me explain a bit what I will do.

 

I will auto-connect a VPN before logon (and keep it active) when I'm off-fabric (test on pinging an on-fabric device). I set a couple of options and as I can see my VPN auto-connect correctly before logon without the tag <machine> enabled.

 

I have on my VPN xml : 

 

<keep_running>1</keep_running>

 

<show_vpn_before_logon>1</show_vpn_before_logon>

<on_os_start_connect>MY VPN</on_os_start_connect>

<on_os_start_connect_has_priority>1</on_os_start_connect_has_priority>

<autoconnect_tunnel>MY VPN</autoconnect_tunnel>
<autoconnect_only_when_offnet>1</autoconnect_only_when_offnet>

 

With and without <machine> tag the behavior is the same. 

 

So what is the use of this tag and in this case what is the correct configuration ??? 

 

Many thanks for your help ! 

2 replies

zoriax
zoriaxAuthor
New Member
May 12, 2022

To be more precise, my question is what is the correct configuration to add an always-on and machine (before login) VPN with auto-connect when off fabric ?

 

autoconnect_tunnel with autoconnect_only_when_offnet works fine together but what appends if machine flag is set to 1 ? It's a bit confuse for me...

zoriax
zoriaxAuthor
New Member
May 12, 2022

On documentation, with on_os_start_connect I must enable <machine>. But in fact, with <machine> tag set to 0 the behavior is better : 

1) VPN connects before logon more quickly

2) VPN re-connects correctly after power-saving

 

Please could you help me ?

Terms & ConditionsAccessibility statement