ecpvolht
Eon CheckPoint VPN on Linux How-To
- extract
pkcs12
package into CA cert, client cert and private key https://stackoverflow.com/a/9516936/2915423 (optionally drop private key passphrase) - install shrew vpn client (package called
ike
on Ubuntu/Debian, google the package name for your specific distro OR build from source) - configure as suggested on attached screenshots, OR import site config and replace cert files & private key @ Authentication:Credentials tab
- run key service daemon (via provided ikedsvc init script or manually)
- launch the GUI (
qikea
) and connect OR use the CLI variantikec -r <sitename> -a
where the sitename is a name of file located at~/.iked/sites/
- enjoy
In case CLI solution is preferred init service can be used. In order for it to work symlink shell scripts from within ./src as follows:
Then, both the key daemon and the connection client can be run via CLI like this:
sudo /etc/init.d/ike start && /etc/init.d/ikes start
TODOs
- improve currently primitive solution for docker via routing