Setting up a VPN within Omarchy (FortiClient)

[mrpbennett]

I am attempting to move my work machine (M1 mac) over to Omarchy, but for me to be able to use it for work, ill need my VPN client to work.

I have to use Forticlient-vpn I have found the package in AUR, installed, setup and works fine. But when I attempt to access items that are behind my VPN I get DNS issues.

This is what i get

 resolvectl status
Global
           Protocols: +LLMNR -mDNS -DNSOverTLS DNSSEC=no/unsupported
    resolv.conf mode: foreign
  Current DNS Server: 1.1.1.1
         DNS Servers: 1.1.1.1
Fallback DNS Servers: 8.8.8.8

Link 2 (enp6s0)
    Current Scopes: DNS LLMNR/IPv4 LLMNR/IPv6
         Protocols: +DefaultRoute +LLMNR -mDNS -DNSOverTLS DNSSEC=no/unsupported
Current DNS Server: 1.1.1.1
       DNS Servers: 192.168.4.2 1.1.1.1 fd43:f87a:2778:1::1
     Default Route: yes

Link 3 (docker0)
    Current Scopes: none
         Protocols: -DefaultRoute +LLMNR -mDNS -DNSOverTLS DNSSEC=no/unsupported
     Default Route: no

Link 4 (fctvpndff9ab1c)
    Current Scopes: LLMNR/IPv4 LLMNR/IPv6
         Protocols: -DefaultRoute +LLMNR -mDNS -DNSOverTLS DNSSEC=no/unsupported
     Default Route: no

fctvpndff9ab1c is the VPN. Looks like it's not picking up a default route. I guess this is more of an Arch issue than Omarchy but not sure if there is anything I should be changing anywhere.

And i get the following within Google Chrome

This site can’t be reached
am1-kube-grafana.company.com’s server IP address could not be found.
Try:

Checking the connection
Checking the proxy, firewall, and DNS configuration
ERR_NAME_NOT_RESOLVED

[yuters]

I don't know if this would help in your case, but I've had my VPN work successfully with openconnect (--protocol=fortinet) instead of the forticlient-vpn which didn't work for me.

[mrpbennett]

Thanks for the tip Martin, haven't seen this before. How would I configure it to connect to my vpn domain and user / password?

I haven't had a proper look through the docs as I'm on my phone.

[yuters]

sudo openconnect --protocol=fortinet mycompany.fortiddns.com:443 -u username. Change the domain, port and username accordingly. There will be a prompt for the certificate and for entering your password and you should be good to go.

[mrpbennett]

Thanks I'll try that in the AM.

[mrpbennett]

I managed to get it sorted via openfortivpn i posted about it here

Thanks for pointing me in the right direction