1

I have a Fortinet VPN server, to which I connect through FortiClient from my Windows 10 PC. Can I install FortiClient for Raspberry Pi Raspbian OS (when I do sudo apt install forticlient it does not locate the package)? If not are there any other options to connect to Fortinet VPN on Raspberry Pi?

4 Answers 4

3

I use openfortivpn too.

install with: apt install openfortivpn

start with: sudo openfortivpn [forticlienthost] --username=[user]

2

It seems you have two questions:

Q1: Installing FortiClient for Raspberry Pi:

A1: Fortinet is not open-source software. Consequently, it would be very unlikely that there would be a client for Raspberry Pi. I see from their website they do offer a Linux version, but it wouldn't run on Raspbian because RPi uses an ARM processor. So, the answer to this question is, "No, you cannot install forticlient." FYI, you should read the APT documentation as it may help you avoid asking questions here that you can easily answer yourself.

Q2: Other options to connect to Fortinet VPN on Raspberry Pi?

Fortinet's website has a couple of "cookbooks" that deal with making connections via IPsec and SSL. You might wish to view these (I didn't) to see if they offer any useful suggestions. In other words, you might be able to hack a solution on the RPi to get it to connect.

But my advice would be to get a good open-source firewall/VPN package (e.g. OPNsense) instead of tackling what's likely a challenging effort connecting RPi to a commercial, closed source VPN server. That's just my opinion though - you should try it if it interests you. If you do decide to try an open-source solution for your server, you can Google openvpn client raspberry pi 3 to get some help in setting up a VPN on the RPi.

1

So far the only solution I have found to work is to use the web browser SSL VPN setup on the Fortigate, and then connect using the Raspian (Buster) Chromium browser. You wont have tunnel mode but for RDP, SSH etc it works fine.

For apps that require tunnel mode my workaround is to create a RDP/VNC desktop/jumpbox with supporting software on the network which has access to the app, so basically I use the Fortigate web VPN client to RDP/VNC to a remote desktop that can run the app I require.

I tried various options to get a native tunnel client working to no avail because nothing is compiled for ARM. The closest to getting something working I found is compiling openfortigui - however, there were some compile errors when I tried, so looks like the source code requires modification to support Raspberry/ARM in some way.

I have heard that it may be possible to configure something like Strongswan (available to install on Raspian) to connect to a Fortigate VPN using IPSec, but I have not seen this working or done it, so take it with a grain of salt until you know different.

Good Luck.

1

I have managed this using https://salsa.debian.org/debian/openfortivpn Use the armhf package from: https://packages.debian.org/buster/openfortivpn Which works a charm.

1
  • do this works if there is two factor authentication?
    – Artur
    Jul 12 at 9:32

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.