For more information regarding the security incident at F5, the actions we are taking to address it, and our ongoing efforts to protect our customers, click here.

F5 VPN Client from Raspberry Pi

Did you know that F5 has a VPN client that can run on a Raspberry Pi? You may already know that we can run on iOS, Android, Windows, Mac, and Linux, but we can also run on a little device that is sma...
Published Dec 11, 2019
Version 1.0
BIG-IP Access Policy Manager (APM)
cloud
raspberrypi
Eric_Chen's avatar
Eric_Chen
Icon for Employee rankEmployee
Dec 12, 2019

Note in the article I omitted some details:

 

  1. This will work for username/password based auth and/or certificate, but not if you have a custom login page (i.e. for the F5 folks this will not work for our corporate VPN)
  2. I have configured my Raspberry Pi to forward packets and rewrite the source address through the tunnel interface (left as an exercise to the reader on how to configure on raspbian).

 

The VPN setup is fairly basic. The certificate authentication is handled by a clientssl profile that requires my CA.

 

The VPE is configured with a resource assign for network access and webtop (minimal requirements for VPN).

 

The network access is setup with split tunnel and a range of IPs for the clients. SNAT is enabled.