Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

How can I install and setup a fortinet SSL VPN client on a VPS that's running on Centos? I have problem to do it because all guide I have are all using GUI which is not installed on the VPS to save resource. (example:

I already have the linux version for the vpn client but not sure how to install and configure it only using the terminal.

share|improve this question
@ben where did you get the cli client? i've download 2 different versions from fortinet support but none of them have cli support forticlientsslvpn_linux_4.0.2010.tar.gz forticlientsslvpn_linux_4.0.2012.tar.gz – gfa Mar 25 '13 at 15:29
just install xterm and requiered libraries on the vps and run the client with X over ssh (ssh -X user@host) – gfa Mar 25 '13 at 15:30

I spent a while trying to find documentation on this, and got this from a Fortinet Engineer.

  1. Install like any other using tar.gz file Then run below command in linux CLI
  2. Then run below command in linux CLI

./forticlientsslvpn_cli --server --vpnuser forti

Make sure the command run from the sslvpn directory. Substitute the IP address with the one of your server .

share|improve this answer
Just as @ben-arent suggested you can use the cli client for linux. I found it here:… – user166737 Mar 28 '13 at 3:19

You can try to configure your VPN without the Fortinet GUI. Here's a complete guide to IPSEC for linux and you may want to try this:

The link is created by running pppd through a pseudo terminal that is created by pty-redir and connected to ssh. This is done with something similar to the following sequence of commands:

/usr/sbin/pty-redir /usr/bin/ssh -t -e none -o 'Batchmode yes' -c blowfish -i /root/.ssh/identity.vpn -l joe > /tmp/vpn-device
sleep 10

/usr/sbin/pppd `cat /tmp/vpn-device`
sleep 15

/sbin/route add -net gw netmask
/sbin/route add -net gw netmask

What this does is run ssh, redirecting the input and output to pppd. The options passed to ssh configure it to run without escape characters (-e), using the blowfish crypto algorithm (-c), using the identity file specified (-i), in terminal mode (-t), with the options 'Batchmode yes' (-o). The sleep commands are used to space out the executions of the commands so that each can complete their startup before the next is run.

From "Bring up the link"

Next section, "Scripting" may help you as well to configure and run your VPN client. There's additional information in the ubuntu documentation.

share|improve this answer
Your answer is fine except OP was talking about SSL VPN (!IPSEC), have an upvote anyway! – Shadok Jan 21 '13 at 15:38

This is another short solution. Download & Install the client:

# wget -q -O fortisslvpn.tgz && tar -xzf fortisslvpn.tgz
# cd forticlientsslvpn && ./helper/

Press Ctrl+C, Agree Their License (1st time only) & then connect to VPN by:

# yes | ./forticlientsslvpn_cli --server example_firewall_host:10443 --vpnuser example_user > /dev/null
share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.