f5fpc

4 Topics

f5fpc linux client does it support client cert and username/secret auth?
I can't get the linux CLI client to log on successfully using client certificate and username/secret using a login form. Does the f5fpc linux client support authenticating with a client cert and username/secret? From the server logs I see client cert auth is succeeding. However, it seems that the password (in my case an OTP) is not being received by the server, at least not into the variable "session.logon.last.password" we all know and love, which is resulting in RADIUS auth failure. I tried logging the password (in a test environment of course) per the docs I refer to below, and it's acting as though the variable doesn't exist (I get a TCL error from the "mcget -secure ..." custom variable assign, and when I try printing out the encrypted variable it prints an empty string. Thus I'm doubting the OTP is even making it to the APM. How can I troubleshoot this further? I was going to try passing the traffic through a proxy like burp suite but it seems f5fpc doesn't support local proxy settings. I don't see anything useful in ~/.F5Networks/standalone.log and the APM logs are making it seem like the password isn't arriving. I'm running client v. 7210.2020.0826.1 and BigIP v. 15.1.2.1. I am familiar with these: Using the Linux client f5fpc to connect to the BIG-IP APM network access for the first time Creating a two-factor authentication access policy for use with the Linux f5f5pc command-line client Using mcget -secure to decrypt and display a password for troubleshooting auth issues. (f5.com)
Solved
Mike_Ho
Mar 14, 2021 Place Technical Forum
1.2KViews
0likes
1Comment
BIG IP Edge Client Linux
Hi , is there a specific command or parameter in f5fpc cli for OTP entry ? I've noticed a disparity between the CLI on my system and the window version there 's a webpage pop up for OTP entry ? How can I address this issue on the CLI in linux?
RahulTripathi
Jan 16, 2024 Place Technical Forum
390Views
0likes
1Comment
Selecting full/split tunnel profile with f5fpc
Hi, We're using BigIP Edge Client to connect to our corp VPN. When connecting using the GUI, we get the connection form where we can chose Full Tunnel or Split Tunnel mode. This works fine. We also have an unattended connection script using F5fpc to connect. However, this always connects in Split-Tunnel mode. How can I make it connect in Full-Tunnel? This is the "f5fpc -info" output when connected in SPLIT tunnel - note the favorite name: favorite: type: name: code: status: 1 vpn /Common/corp_split_network 1 established This is the "f5fpc -info" output when connected in FULL tunnel - note the favorite name: favorite: type: name: code: status: 1 vpn /Common/corp_ft_network 1 established I've tried these commands, but it still connects in SPLIT tunnel mode: f5fpc.exe -start /h globalvpn /u username /p password /t /n /Common/corp_ft_network f5fpc.exe -start /h globalvpn /u username /p password /t /n "/Common/corp_ft_network" f5fpc.exe -start /h globalvpn /u username /p password /t /n "/Common/corp_ft_network:vpn" Is there a way to force Full-Tunnel? Is the problem caused by the favorite name starting with a slash (I can't change it) and if so, is there a way to escape the slashes? Thank you.
Pedro_F_
Jul 29, 2020 Place Technical Forum
346Views
0likes
0Comments
f5fpc unable to connect on Ubuntu 25.04
I’ve been using the f5fpc client on Ubuntu to connect to my company’s VPN for the past two years without issues. However, I recently stopped being able to connect. In my syslog, I’m now seeing these messages: kernel: netlink: 'svpn_x86_64': attribute type 6 has an invalid length. kernel: netlink: 'svpn_x86_64': attribute type 4 has an invalid length. I’m not sure whether these messages were appearing before, or if they started after I upgraded from Ubuntu 24 to Ubuntu 25. Current setup: f5fpc version: 7253.2025.0725.1 Ubuntu 25.04 Has anyone encountered this issue, especially after upgrading to Ubuntu 25?
Gentleman
Aug 06, 2025 Place Technical Forum
61Views
0likes
1Comment