f5fpc

3 Topics

BIG IP Edge Client Linux
Hi , is there a specific command or parameter in f5fpc cli for OTP entry ? I've noticed a disparity between the CLI on my system and the window version there 's a webpage pop up for OTP entry ? How can I address this issue on the CLI in linux?
RahulTripathi
Jan 17, 2024 Place Technical Forum
280Views
0likes
1Comment
Selecting full/split tunnel profile with f5fpc
Hi, We're using BigIP Edge Client to connect to our corp VPN. When connecting using the GUI, we get the connection form where we can chose Full Tunnel or Split Tunnel mode. This works fine. We also have an unattended connection script using F5fpc to connect. However, this always connects in Split-Tunnel mode. How can I make it connect in Full-Tunnel? This is the "f5fpc -info" output when connected in SPLIT tunnel - note the favorite name: favorite: type:name: code:status: 1 vpn /Common/corp_split_network1 established This is the "f5fpc -info" output when connected in FULL tunnel - note the favorite name: favorite: type:name: code:status: 1 vpn /Common/corp_ft_network1 established I've tried these commands, but it still connects in SPLIT tunnel mode: f5fpc.exe -start /h globalvpn /u username /p password /t /n /Common/corp_ft_network f5fpc.exe -start /h globalvpn /u username /p password /t /n "/Common/corp_ft_network" f5fpc.exe -start /h globalvpn /u username /p password /t /n "/Common/corp_ft_network:vpn" Is there a way to force Full-Tunnel? Is the problem caused by the favorite name starting with a slash (I can't change it) and if so, is there a way to escape the slashes? Thank you.
Pedro_F_
Nov 22, 2022 Place Technical Forum
318Views
0likes
0Comments
f5fpc linux client does it support client cert and username/secret auth?
I can't get the linux CLI client to log on successfully using client certificate and username/secret using a login form. Does the f5fpc linux client support authenticating with a client cert and username/secret? From the server logs I see client cert auth is succeeding. However, it seems that the password (in my case an OTP) is not being received by the server, at least not into the variable "session.logon.last.password" we all know and love, which is resulting in RADIUS auth failure. I tried logging the password (in a test environment of course) per the docs I refer to below, and it's acting as though the variable doesn't exist (I get a TCL error from the "mcget -secure ..." custom variable assign, and when I try printing out the encrypted variable it prints an empty string. Thus I'm doubting the OTP is even making it to the APM. How can I troubleshoot this further? I was going to try passing the traffic through a proxy like burp suite but it seems f5fpc doesn't support local proxy settings. I don't see anything useful in ~/.F5Networks/standalone.log and the APM logs are making it seem like the password isn't arriving. I'm running client v. 7210.2020.0826.1 and BigIP v. 15.1.2.1. I am familiar with these: Using the Linux client f5fpc to connect to the BIG-IP APM network access for the first time Creating a two-factor authentication access policy for use with the Linux f5f5pc command-line client Using mcget -secure to decrypt and display a password for troubleshooting auth issues. (f5.com)
Solved
Mike_Ho
Mar 18, 2021 Place Technical Forum
1.1KViews
0likes
1Comment