FortiClient with Ubuntu 22.04 Bytes Received 0

[kaCo]

Hey, Guys,

I don’t know if you can help me with this problem, but I have tried many types of configurations network and of interfaces, therefore, the problem still happening. 

On Windows I’m abel to Connect and use services of this VPN, but on Ubuntu, after some atualizations of system, when I try to connect the FortiClient shows the “VPN Connect” but the bytes received are iqual 0 and I can’t access the services and VMs. 

I already try restart network confugurations and reinstall FortiClient, but still not working.

Thanks for your attention

[AnthonyH]

Hello kaCo,

Do you know what FortiClient firmware you have installed? The latest FortiClient v7.4.2 support Ubuntu 22.04: https://docs.fortinet.com/document/forticlient/7.4.2/linux-release-notes/136392/product-integration-...

Also there are recommended installation instructions you can follow here: https://docs.fortinet.com/document/forticlient/7.4.2/linux-release-notes/213138/install-forticlient-...

Lastly have you tried other operating systems or devices to see if the behaviour is replicated? If that is the case it could be a configuration issue on the FortiGate we would need to check further on.

[kaCo]

Hi @AnthonyH, 

Unfortunately, nothing worked, it keeps setting the bytes to 0.

I'm using the latest version 7.4 on Ubuntu 22.04.

It's creating automatic interfaces every time I try to connect, it shows successful connection and doesn't allow me to access the services.

I tried adding dns to resolv.conf, but that didn't work either.

[kaCo]

And the worst part is that depending on where I change to try to fix the connection, I lose the internet connection.

[kaCo]

Unfortunately, nothing worked, it keeps setting the bytes to 0.

I'm using the latest version 7.4 on Ubuntu 22.04.

It's creating automatic interfaces every time I try to connect, it shows successful connection and doesn't allow me to access the services.

I tried adding dns to resolv.conf, but that didn't work either.

[AEK]

Hi kaCo

As first troubleshooting step, you may try sniff from FGT side if anything is received.

Also try sniff on Ubuntu side if anything is sent/received through the tunnel interface.

[kaCo]

I still haven't been able to solve the problem, so I'm sending more information to see if you can help me:

[AEK]

It seems the interface is here with the right IP.

Can you also share the routing table.

[kaCo]

I don't know if something changes with the network configurations when the OS updates. But if I use this interface and run the command: sudo ip route add default dev  interface, the VPN works for a moment, but the internet isn't accessible.

[AEK]

I can see on the output that there are many routes injected by VPN, right?

In the meantime according to your description it seems that the correct route may not have been injected when VPN connects.

So do you see the correct routes on the output? Or some are missing?

On the other hand you said when you add default route through the tunnel you can't connect to internet. That's usually normal, since in split tunnel config we have one default route through the physical interface (to your home router), and additional routes through the tunnel so you can reach the remote networks.