openfortivpn 命令

常用示例

说明

openfortivpn is an open-source VPN client for Fortinet's proprietary PPP+TLS VPN solution, commonly known as FortiClient SSL VPN. It establishes a secure tunnel using PPP over TLS/SSL to connect to FortiGate appliances and FortiClient VPN servers. The client handles authentication (including two-factor), certificate verification, and route configuration. It creates a PPP interface for the VPN connection and can manage routing to direct traffic through the VPN tunnel.

参数

-c, --config=_file_

Configuration file (default: /etc/openfortivpn/config)

-u, --username=_user_

VPN account username

-p, --password=_pass_

VPN account password

--trusted-cert=_sha256_

Trust gateway certificate with this SHA256 fingerprint

--user-cert=_file_

Client certificate file for authentication

--user-key=_file_

Client private key file

--realm=_realm_

Specify authentication realm

-o, --otp=_otp_

One-time password for two-factor authentication

--otp-prompt=_prompt_

Search for OTP prompt string

--otp-delay=_delay_

Delay in seconds before sending OTP

--saml-login=_port_

Use SAML/SSO authentication

--pinentry=_program_

Use a pinentry program for password entry

--persistent=_seconds_

Reconnect after the specified delay on disconnect

--no-routes

Do not add VPN routes to routing table

--half-internet-routes

Add two /1 routes instead of default route

--set-routes=_bool_

Configure routes (0 to disable)

--set-dns=_bool_

Configure DNS (0 to disable)

--pppd-log=_file_

Log file for pppd

--pppd-ifname=_name_

Set ppp interface name

--pppd-use-peerdns=_bool_

Use DNS servers provided by the peer

--user-agent=_string_

Set custom HTTP User-Agent

-v, --verbose

Increase verbosity (use multiple times)

-q, --quiet

Decrease verbosity