Difference between revisions of "ssl network extender on gentoo linux"

From cpwiki.net
Jump to: navigation, search
Check Point Profressional Services
 
(One intermediate revision by one user not shown)
Line 33: Line 33:
 
Often you will receive a "failed to initialize" error message when trying to connect.  If so, run it from CLI to see what error messages you get.
 
Often you will receive a "failed to initialize" error message when trying to connect.  If so, run it from CLI to see what error messages you get.
  
  $ snx                                                                                                           ~/src/checkpoint
+
  $ snx
 
  snx: error while loading shared libraries: libstdc++.so.5: cannot open shared object file: No such file or directory
 
  snx: error while loading shared libraries: libstdc++.so.5: cannot open shared object file: No such file or directory
  
Line 62: Line 62:
 
   - proxy_port      proxy port
 
   - proxy_port      proxy port
 
   - proxy_user      username for proxy authentication
 
   - proxy_user      username for proxy authentication
 
  
 
== connect to SSL gateway ==
 
== connect to SSL gateway ==
Line 68: Line 67:
 
Once connected you should see something like this...
 
Once connected you should see something like this...
  
[[file:snx-4]]
+
[[file:snx-4.png]]
  
 
and see a tun interface on you box. So, your client linux kernel must support creating tun interfaces to.
 
and see a tun interface on you box. So, your client linux kernel must support creating tun interfaces to.

Latest revision as of 01:49, 26 April 2016

This page describes how to get the ssl extender SNX client up and running on a linux box. This is alternative to running the Secure Remote or Mobile client on a winblows box to establih a client to gateway vpn. For configure the SSL Network Extender server, please see the VPN Administration Guide for you version of Check Point.


Contents

install a java runtime environment JRE

google it if ya need to...

downloading snx

if you can find it on the support website, download it. I found it once, but had trouble finding it again. An alternative is to download it from the SSL gateway.

After logging into your gateway via web browser, click on settings

snx-1.png

Then you will hopefully find a download link like this...

snx-2.png


install SNX

run the install file. It put a binary in /usr/bin/snx for me.

The SSL gateway will likely download and try to install it for you. You may see a screen like...

File:snx-3

Then provide your root password and it should install for you.


test run snx

Often you will receive a "failed to initialize" error message when trying to connect. If so, run it from CLI to see what error messages you get.

$ snx
snx: error while loading shared libraries: libstdc++.so.5: cannot open shared object file: No such file or directory

gentoo

$ sudo emerge -av --quiet sys-libs/libstdc++-v3  

for debian or ubuntu, if you can find the package...


$ dpkg -i libstdc++5_3.3.6-17ubuntu1_i386.deb

when if works, you should be able to run it and it will give you a help message like..

$ snx                                                                                                          
failed to open file: /home/john/.snxrc
Valid attributes are:
  - server          SNX server to connet to
  - sslport         The SNX SSL port (if not default)
  - username        the user name
  - certificate     certificate file to use
  - calist          directory containing CA files
  - reauth          enable automatic reauthentication. Valid values { yes, no }
  - debug           enable debug output. Valid values { yes, 1-5 }
  - cipher          encryption algorithm to use. Valid values { RC4 / 3DES }
  - proxy_name      proxy hostname 
  - proxy_port      proxy port
  - proxy_user      username for proxy authentication

connect to SSL gateway

Once connected you should see something like this...

snx-4.png

and see a tun interface on you box. So, your client linux kernel must support creating tun interfaces to.

  1. ifconfig tunsnx /vol1/distfiles

tunsnx: flags=4305<UP,POINTOPOINT,RUNNING,NOARP,MULTICAST> mtu 1500

       inet 172.16.10.41  netmask 255.255.255.255  destination 172.16.10.40
       unspec 00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00  txqueuelen 100  (UNSPEC)
       RX packets 0  bytes 0 (0.0 B)
       RX errors 0  dropped 0  overruns 0  frame 0
       TX packets 1551  bytes 135768 (132.5 KiB)
       TX errors 0  dropped 0 overruns 0  carrier 0  collisions 0

Ready to use your vpn!


links

I found this very helpful...

Check Point SSL Network Extender