search

adrienverge / openfortivpn

Client for PPP+TLS VPN tunnel services
GNU General Public License v3.0
2.74k stars 321 forks source link

modify firewall #1203

Open denissanga opened 8 months ago

denissanga commented 8 months ago

Hi, I have a GLinet with Openwrt installed and I add openfortivpn.

I can connect to fortigate succesfully with terminal command openfortivpn -c ./config

then I have a fortigate and when I'm connected to fortigate lan I would like reach the devices connected to GLinet remotely. It is possible?

for example I have:

1) fortigate 60F 2) router -> GLinet (IP 192.168.1.10 DHCP 192.168.5.xxx) with openfortivpn -> device PC 192.168.5.10 -> device NAS static ip 10.0.0.10 -> device PLC static ip 20.0.0.10 -> PC 192.168.1.11

when I'm connected to fortigate lan I would reach remotely the devices connected to GLinet : 192.168.5.10, 10.0.0.10, 20.0.0.10, 192.168.1.11

it is possible? many thanks in advance

DimitriPapadopoulos commented 8 months ago

I have no clue what GL.iNet is, but I think it is irrelevant here because it is just a piece of hardware hardware running OpenWrt.

To answer your question, openfortivpn does what the Fortigate asks it to do. Often, corporate VPN servers want all network traffic to be redirected through the tunnel, which means your LAN is not accessible while the VPN is running. Therefore you need to modify this default behaviour. See for example How to add specific routes using pppd.

By the way, I suspect this has nothing to do with firewalls, just routing.

denissanga commented 8 months ago

many many thanks for your help. I have just one more question

I connected my glinet Openwrt with openfortivpn and it connect for few seconds and then I obtain: Unknown error

Wed Mar  6 10:02:59 2024 daemon.err openfortivpn[22569]: pppd: Terminated because it was sent a SIGINT, SIGTERM or SIGHUP signal.
Wed Mar  6 10:02:59 2024 daemon.info openfortivpn[22569]: Terminated pppd.
Wed Mar  6 10:02:59 2024 daemon.info openfortivpn[22569]: Closed connection to gateway.
Wed Mar  6 10:02:59 2024 daemon.warn openfortivpn[22569]: getsockopt: SO_SNDBUF: Protocol not available
Wed Mar  6 10:02:59 2024 daemon.warn openfortivpn[22569]: getsockopt: SO_RCVBUF: Protocol not available
Wed Mar  6 10:03:01 2024 daemon.info openfortivpn[22569]: Logged out.
Wed Mar  6 10:03:01 2024 daemon.notice netifd: openfortivpn (22562): VPN account password:
Wed Mar  6 10:03:02 2024 user.notice mwan3[24259]: Execute ifdown event on interface openfortivpn (unknown)
Wed Mar  6 10:03:02 2024 daemon.notice netifd: Interface 'openfortivpn' is now down
Wed Mar  6 10:03:11 2024 user.notice firewall: Reloading firewall due to ifdown of openfortivpn ()

can you help me understand why it disconnect? first line of log is: Wed Mar 6 10:02:59 2024 daemon.err openfortivpn[22569]: pppd: Terminated because it was sent a SIGINT, SIGTERM or SIGHUP signal

DimitriPapadopoulos commented 8 months ago

Please run openfortivpn from the command line if you want help, not as a daemon.

https://github.com/adrienverge/openfortivpn/wiki#reporting-issues