This was to let me use the proper HTTPS port of 443 for remote access SSL VPN. Note: I’ve changed the FortiGates default management HTTPS port from 443 to 4433 (before I started). Here’s how to setup remote access to a FortiGate firewall device, using the FortiClient software, and Active Directory authentication. forticlientsslvpn-expect.FortiGate Remote Access ( SSL– VPN ) is a solution that is a lot easier to setup than on other firewall competitors. Token=$1 #new addition, 1st script parameter as variableĪnd i have added on more block in the expect part, check expect 'A FortiToken code is required for SSL-VPN login authentication.' below cat /tmp/expectĮxpect 'A FortiToken code is required for SSL-VPN login authentication.' #new block To make it more visible, in the VPN Credentials block i added # VPN Credentials Probably something is interfering between the read token part and the actual token passed to the authentication but I will further troubleshoot this when i have more time but for now maybe this is helpful to someone It asks for the password, certificate and token and everything is working as expectedĪnd running it with. So i'm not sure if the problem is in my password where it includes a character (escaping with or in the token part or in the token code part.įorticlientsslvpn_cli -server host:443 -vpnuser vnn_user -keepalive Please check the password, client certificate, etc. I have tried to add also token handlingĮxpect 'A FortiToken code is required for SSL-VPN login authentication.'īut i keep getting an error about authentication

Spawn $FORTICLIENT_PATH -server $VPN_HOST -vpnuser $VPN_USER -keepaliveĮxpect 'Would you like to connect to this server? (Y/N)' Killall -9 $(basename $FORTICLIENT_PATH ) 2> /dev/null 'Įcho 'Specify it at variable FORTCLIENT_PATH 'Įcho 'Located Forticlient VPN Client at: $FORTICLIENT_PATH 'Įcho 'Killing previous instances of Forticlient SSL VPN client.

# If empty - script will take some simple logic to locate appropriate binary.įORTICLIENT_PATH= `uname -r | grep -q 64 & echo $(locate forticlientsslvpn_cli | grep 64bit ) || echo $(locate forticlientsslvpn_cli | grep 32bit ) `Įcho 'Tried to locate Forticlient SSL VPN Cli binary, but failed. # Forticlient SSL VPN Client launching script utilizing expect.

Fortinet vpn client log