Differences
This shows you the differences between two versions of the page.
Both sides previous revisionPrevious revision | Next revisionBoth sides next revision | ||
en:public:netz:vpn_forticlient_linux [24.03.2022 00:22] – Translated title to be grammatically correct pit37126 | en:public:netz:vpn_forticlient_linux [28.11.2023 10:48] – [Alternative: open-source-client openfortivpn] olf39309 | ||
---|---|---|---|
Line 48: | Line 48: | ||
The certificate should be used to prevent man-in-the-middle attacks. The value of " | The certificate should be used to prevent man-in-the-middle attacks. The value of " | ||
- | Important note: Inorder | + | You can use the " |
+ | |||
+ | Important note: In order for the client to work "pppd" | ||
+ | For pppd Versions > 2.5.0, you may need to additionally add the " | ||
+ | |||
+ | **If you fail to mount network drives from fs.hs-regensburg.de while connected with openfortivpn: | ||
+ | |||
+ | This is likely because you have IPv6 enabled in your remote LAN and your system is set to prefer IPv6.\\ | ||
+ | A workaround is to add a host entry to /etc/hosts, forcing IPv4 for fs.hs-regensburg.de: | ||
+ | |||
+ | < | ||
+ | 127.0.0.1 | ||
+ | ::1 | ||
+ | 127.0.1.1 | ||
+ | |||
+ | 194.95.106.39 | ||
+ | </ | ||
+ | |||
+ | Also, you could use the IPv4 address instead of the hostname in your mount call. | ||
+ | |||
+ | This happens because fs.hs-regensburg.de provides an IPv6 address, but as of now IPv6 isn't supported by the OTH network and also not by openfortivpn. So the IPv6 traffic is not routed through the VPN and the mount fails. | ||
+ | |||
+ | You can check if your system tries to use IPv6 by pinging or mounting with debug output enabled: | ||
+ | < | ||
+ | $ ping fs.hs-regensburg.de | ||
+ | PING fs.hs-regensburg.de(fs.hs-regensburg.de (2001: | ||
+ | Datenbytes | ||
+ | |||
+ | $ mount -t cifs -v // | ||
+ | mount.cifs kernel mount options: ip=2001: | ||
+ | mount error(101): Network is unreachable | ||
+ | </ | ||
+ | |||
+ | You can check the IPv6 status of your environment with a service like [[https:// | ||
+ | |||
+ | Also see the [[public: | ||