Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

The Windows users have a new client "Juniper Pulse" to connect to the Juniper VPN server.

On Linux, what VPN client do we have to connect to that Juniper VPN, with maximum compatibility?

Please mention the necessary parameters that have to be provided.

share|improve this question

4 Answers 4

up vote 11 down vote accepted

And my favorite method (no java applet required):

Presumably:

-

REALM=$(wget -q --no-check-certificate -O - 'https://some.site.com/dana-na/auth/url_default/welcome.cgi' | sed -n 's/.*<input\( [^>]*name="realm" [^>]*\)>.*/\1/p' | sed -n 's/.* value="\([^"]*\)".*/\1/p')

After you login, download the following jar (should be done one time only):

https://some.site.com/dana-cached/nc/ncLinuxApp.jar

and unzip it to ~/.juniper_networks/network_connect

Get some new libraries for your 64bit machine yum install glibc.i686 zlib.i686 nss-mdns.i686

Go to ~/.juniper_networks/network_connect and

sudo chown root:root ncsvc
sudo chmod 6711 ncsvc
chmod 744 ncdiag

Get your certificate:

./getx509certificate.sh some.site.com company.cert

And connect:

./ncsvc -h some.site.com -u username -p password -r REALM -f ./company.cert

For some sites I noticed that you also need to put the -U switch:

./ncsvc -h some.site.com -u username -p password -r REALM -f ./company.cert -U 'https://some.site.com/dana-na/auth/url_default/welcome.cgi'
share|improve this answer
    
Any Idea how to enter 2 factor auth information??? –  Tim Ludwinski Nov 7 '14 at 22:28
1  
No, sorry. Check if you can make this work: code.google.com/p/juniper-vpn/source/browse/trunk/junipervpn.py –  cristi Nov 8 '14 at 7:00
    
Thanks. Didn't get the script working but did manage to get the VPN working through the linked page makefile.com/.plan/2009/10/…. –  Tim Ludwinski Nov 10 '14 at 17:06
    
One hint to anyone trying to get the above script to work. I think the Login URL needs to end with /dana-na/auth/url_default/login.cgi. Got the cookie but the script still is not working for me. –  Tim Ludwinski Nov 11 '14 at 15:49
    
A small note on getting the realm. In my case, the realm wasn't present as an input tag; it was there as a select tag. So if the REALM snippet doesn't work for you, try looking in the page source for a select element that looks like this: <select id="realm_17" size="1" name="realm">. You'll want to grab the value attribute of one of the child option tags. –  Chris Laplante Jan 8 at 1:42

I found this page to be the most use for me. mad scientist

share|improve this answer

I believe this is answered on Juniper's forum here - specifically for Network Connect (I'm assuming that's what you're wanting to do). They have excellent screenshots, etc to help you through the process (Five steps).

share|improve this answer
    
The linked page now requires a login. –  Nate Eldredge Sep 20 '13 at 21:19

The OpenConnect VPN client has (nascent) support for Juniper SSL VPN.

See the announcement at http://lists.infradead.org/pipermail/openconnect-devel/2015-January/002628.html

share|improve this answer
3  
You should include a copy of the announcement in your answer -- that link could go dead at some time in the future leaving your answer null & void. It's OK to leave the link as well as a reference. –  fukawi2 yesterday
    
A good point in theory in the general case — but in this case if the server hosting my mailing list archive is offline, so is my git repository. The details in the announcement won't do you much good if you can't get to the code anyway :) Yes, I could include a summary of the announcement, concise and also relatively future-proof so it doesn't include specifics of what has and has not been implemented yet today. That summary is best phrased as "OpenConnect has nascent support for Juniper SSL VPN" :) –  user212598 10 hours ago

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.