Getting the VPN client
.deb-Based (Ubuntu / Debian / etc)
To download and install the .deb-Based client, enter the commands:
wget https://vpn.mtu.edu/public/share/BigIP_Edge_Clients/linux_f5cli.7240.x86_64.deb
sudo apt-get update -y
sudo apt-get install linux_f5cli.7240.x86_64.deb
.rpm-Based (RedHat / CentOS / Fedora / etc):
To download and install the .rpm-Based client, enter the commands:
wget https://vpn.mtu.edu/public/share/BigIP_Edge_Clients/linux_f5cli.7240.x86_64.rpm
sudo yum localinstall linux_f5cli.7240.x86_64.rpm
Using the VPN client
Note: The VPN client does not automatically disconnect upon logging out. If more than one person uses your machine, it is highly recommended that you disconnect when you are done using the VPN. Others who log in after you will be able to use your VPN connection if you fail to disconnect from the VPN.
Starting Connection
Enter the command:
f5fpc --start --host https://vpn.mtu.edu --user <MTU_SSO>
Disconnecting
Enter the command:
f5fpc --stop
Checking VPN status
Enter the following command:
f5fpc –info
Troubleshooting and common considerations
VPN stands for Virtual Private Network, allowing you to create a secure connection to another network over the Internet. MTU requires the BigIP VPN Client from F5. With all things Linux, the client is dependent on what OS you are currently running.
Server Certificate Validation
You may need to run the f5fpc command with the -x flag if you come across this error. Additional details at: K14936: Server certificate validation may fail with the BIG-IP Edge Client command line for Linux.
DNS Conflicts
While connected to the VPN, your routes and DNS configurations have been adjusted by the VPN.
If you experience DNS issues after connecting to the VPN then you may be experiencing a conflict. This is likely related to how the VPN makes those adjustments on your local device. To resolve this, ensure all connections are closed, change your DNS configuration to any DNS server that is not 1.1.1.1 and attempt to reconnect.
File Interactions
A number of files may be interacted with when the VPN client begins its initialization process. This list is subject to change by the upstream provider:
- /etc/nsswitch.conf
- /etc/host.conf
- /etc/resolve.conf
- /etc/hosts
- /tmp/f5Standalone.lock
- $HOME/.F5Networks/f5networks.conf
- $HOME/.F5Networks/standalone.log