Linux Forticlient (6.4.3.0959 - SSL VPN) not working on debian10

[stevenCM_FRASER]

Hi eveyrone,

I just installed FortiClient VPN (6.4.3.0959) as a .deb on a debian 10.

The client disconnects every time it tries to connect. It seems that the problem comes from the DNS modification since the "Set DNS Server" command does not work.

Below is the log file:

....

[sslvpn:DEBG] dns:624 Run command 'Apply settings' failed. [sslvpn:DEBG] dns:633 Setup VPN interface [sslvpn:DEBG] dns:635 Set DNS server: 10.1.100.1 10.1.100.2 [sslvpn:EROR][style="background-color: #ffff99;"] vpn_connection:1258 Config DNS failed[/style] [sslvpn:DEBG] dns:320 Change DNS setting failed, try again after 1 sec [sslvpn:DEBG] dns:320 Change DNS setting failed, try again after 1 sec [sslvpn:DEBG] dns:320 Change DNS setting failed, try again after 1 sec [sslvpn:DEBG] route:159 begin cleanup linux... [sslvpn:DEBG] route:161 clean up route... [sslvpn:DEBG] main:1457 exception: Config DNS failed

Does anyone have an idea how to solve this problem?

Many thanks.

[marchand]

I'm using the same version of Forticlient on Debian 10 and it's working well . What desktop environment are you using?

I'm using Mate Desktop .

[stevenCM_FRASER]

Thank you for your reply, I'm currently using GNOME (3.30.2).

[marchand]

Post your vpn config and the result of  ifconfig or ip addr

[stevenCM_FRASER]

please see below:

ifconfig:

br-633a7c1f5570: flags=4099<UP,BROADCAST,MULTICAST>  mtu 1500         inet 172.19.0.1  netmask 255.255.0.0  broadcast 172.19.255.255         ether 02:42:be:da:c3:55  txqueuelen 0  (Ethernet)         RX packets 0  bytes 0 (0.0 B)         RX errors 0  dropped 0  overruns 0  frame 0         TX packets 0  bytes 0 (0.0 B)         TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0 docker0: flags=4099<UP,BROADCAST,MULTICAST>  mtu 1500         inet 172.17.0.1  netmask 255.255.0.0  broadcast 172.17.255.255         ether 02:42:3a:c8:55:fa  txqueuelen 0  (Ethernet)         RX packets 0  bytes 0 (0.0 B)         RX errors 0  dropped 0  overruns 0  frame 0         TX packets 0  bytes 0 (0.0 B)         TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0 eno1: flags=4163<UP,BROADCAST,RUNNING,MULTICAST>  mtu 1500         inet 192.168.0.23  netmask 255.255.255.0  broadcast 192.168.0.255         inet6 fe80::f66d:4ff:fe25:b37b  prefixlen 64  scopeid 0x20<link>         inet6 2a01:e0a:966:7e20:f66d:4ff:fe25:b37b  prefixlen 64  scopeid 0x0<global>         ether f4:6d:04:25:b3:7b  txqueuelen 1000  (Ethernet)         RX packets 243856  bytes 201566948 (192.2 MiB)         RX errors 0  dropped 0  overruns 0  frame 0         TX packets 229179  bytes 149580724 (142.6 MiB)         TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0         device interrupt 20  memory 0xf7400000-f7420000   lo: flags=73<UP,LOOPBACK,RUNNING>  mtu 65536         inet 127.0.0.1  netmask 255.0.0.0         inet6 ::1  prefixlen 128  scopeid 0x10<host>         loop  txqueuelen 1000  (Boucle locale)         RX packets 1049  bytes 129685 (126.6 KiB)         RX errors 0  dropped 0  overruns 0  frame 0         TX packets 1049  bytes 129685 (126.6 KiB)         TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0 /------------------------------------------------------------/

ip addr:

1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000     link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00     inet 127.0.0.1/8 scope host lo        valid_lft forever preferred_lft forever     inet6 ::1/128 scope host        valid_lft forever preferred_lft forever 2: eno1: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc pfifo_fast state UP group default qlen 1000     link/ether f4:6d:04:25:b3:7b brd ff:ff:ff:ff:ff:ff     inet 192.168.0.23/24 brd 192.168.0.255 scope global dynamic noprefixroute eno1        valid_lft 36130sec preferred_lft 36130sec     inet6 2a01:e0a:966:7e20:f66d:4ff:fe25:b37b/64 scope global dynamic mngtmpaddr        valid_lft 85929sec preferred_lft 85929sec     inet6 fe80::f66d:4ff:fe25:b37b/64 scope link noprefixroute        valid_lft forever preferred_lft forever 3: docker0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default     link/ether 02:42:3a:c8:55:fa brd ff:ff:ff:ff:ff:ff     inet 172.17.0.1/16 brd 172.17.255.255 scope global docker0        valid_lft forever preferred_lft forever 4: br-633a7c1f5570: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc noqueue state DOWN group default     link/ether 02:42:be:da:c3:55 brd ff:ff:ff:ff:ff:ff     inet 172.19.0.1/16 brd 172.19.255.255 scope global br-633a7c1f5570        valid_lft forever preferred_lft forever

[rokopi]

@stevenCM_FRASERdid you ever find a solution for this ? I have the same issue on my Ubuntu 16.04 machine.

[alfonsoem]

I also have that message in my logs.

When Forticlient fails I switch to openfortivpn from Adrian Vergé. It is Open Source and just works (always).

https://github.com/adrienverge/openfortivpn