New Member

Question

IPsec VPN on linux ?

Forum|Forum|8 years ago
June 6, 2018
20 replies
71401 views

Hi,

I would like to know if it's possible to connect the VPN Remote Access IPsec (not the site2site) in Linux?

I know that for the VPN SSL I can use openFortinet or something like that in linux, but apparently the IPsec VPN is not supported.

Another questions, is there a way to start and stop the Ipsec VPN from command prompt or with an API?

ericli_FTNT

Staff

You can install a FortiClient as a IPSEC client on Linux.

[link]https://www.forticlient.com/[/link]

SulyITAuthor

New Member

As you can see in attachment the linux client doesn't support the IPSec VPN.

It is possible to use another client for the connexion on linux? Or this is possible to use a regular site2site instead of the client?

Thanks in advance

2018-06-06 17_47_0___int Protection.jpg

ericli_FTNT

Staff

Sorry, double checked it. It turns out that currently linux version does not have this feature.

emnoc

New Member

review strongswan. It's suitable for ipsec vpn and for dialup applications.

HancieC

New Member

Do anyone tried to connect StrongSwan tunnel (route-based) IPSEC mode to Cisco router (ISR) or maybe someone have an instruction how to do it ?

I need to connect an linux instance from cloud to Cisco ISR router

hendri_tobing

New Member

Hi,

I wonder also about this. Is there any solution or at least a workaround for Linux users to connect to IPSec VPN?

Thank you.

SulyITAuthor

New Member

The shrewsoft client, the package is called "ike".

sw2090

SuperUser

Yeah shrewsoft is still good on windows but since the developement is shut down since 2014 it will not work in current linuxes. I managed to compile it on an ubuntu 20.04 with some cheating but it diddn't really work at all afterwards.

I however then used OpenSwan/StrongSwan to do it hence that's in the standard repos of allmost every distro. However there still is no suitable gui for it in linux. But it does work fine on cli.

I only need to execute "ipsec up <connectionname>" to bring it up and it uses iptables instead of routing entries here. Just the only issue I have ist that it doesn't support multiple subnets when you use ikev1 but that one is to blame me for still not using ikev2 xD

britzer0683

New Member

Is there any plan from fortinet to have IPSEC Configuration in linux?

Sign up

Login with SSO

Login to the community

Login with SSO