FortiClient VPN application login but does not access the configured VPN

[adolfoaugustor]

FortiClient VPN application accesses with username and password, but does not access the configured VPN, the same access was performed on Windows and worked normally. But on ubuntu 23.10 without success.

[mle2802]

Hi @adolfoaugustor,
Did you mean that VPN is connected successfully but users are not able to access internal resources?

[adolfoaugustor]

yes

[mle2802]

Hi @adolfoaugustor,
Can you run the following command when try to generate some traffic

diag debug reset

diag debug flow filter addr X.X.X.X (tunnel IP)

diag debug flow show ip en

diag debug flow show func en

diag debug console time ena

diag debug ena

diag debug flow trace start 999

[dbu]

Maybe you need to check the Split tunnel configuration and make sure routing is in place. 

[dbu]

Hi @adolfoaugustor ,

Do you mean it is not matching the correct portal ?
You can run this debugs : 

diag debug app sslvpn -1

diag debug app fnbamd -1

diag debug enable

>reproduce the issue

>disable debug with "diag debug disable"

I hope we can find more about your issue. 

[adolfoaugustor]

how to use this commands in ubuntu 23.10?

[dbu]

Both provided commands from me and  @mle2802 can be run  from Fortigate CLI. 
You can initiate connection from the Ubuntu machine and the debugs will show us what is going on. 

[rtichkule]

Those are the debug commands that show the packet processing, these need to be executed in FortiGate CLI.

[adolfoaugustor]

yes