This software allows you to connect to an F5 Networks VPN server without using their browser plugin. It also has the advantage of setting up DNS properly on OSX systems, which the official client doesn't do. (but maybe they will in the future, now that they can copy the method I use).

It is not supported or affiliated with F5 in any way. I actually find it rather sad the client they provide is so terribly poor that I had to write this in order to get reliable access to my company's VPN.

This software does not require any software from F5 to be installed on the client. The only requirement is Python 2.3.5 or later. It works on at least Linux and OSX systems, but porting to any similar OS should be trivial. Porting to Windows, on the other hand, is probably not reasonably possible.

Build:

make install

as root.

Add to path: cat export PATH=$PATH:/usr/local/bin >> .bash_profile # for bash cat export PATH=$PATH:/usr/local/bin >> .zsh_profile # for zsh

As normal user:

f5vpn-login user@host

user@host is saved for future invocations, so doesn't need to be specified on future invocations.

Use CTRL-C to exit.

The application will save "user@host" and last session in ~/.f5vpn-login.conf. In case of problems or for reset the session data simply remove that file.

• James Y Knight, foom@fuhm.net
• Daniele Napolitano, dnax88@gmail.com

• Added support for mac os x 10.13 (moved install to /usr/local/bin for 우리 예지 :)

• Fixed detect of expired session

• Adding options for --skip-dns and --skip-routes to prevent f5 from setting any routes or resolv.conf options, regardless of the config pulled from the remote gateway

• Added ability to choose the VPN connection when multiple are returned

Features:

• Added SOCKS proxy support, if you have the "SocksiPy" python module installed; use the --socks5-proxy argument.

Bugfixes:

• Fixed compatibility issues with some newer version of the VPN server. (thanks James Trammell and Dave Cadwallader)

Bugfix:

• Oops I broke resolvconf again. :( Forgot an os.close()...

Bugfixes:

• Support non-split-tunneling VPN configuration. (thanks Mark Kamichoff)
  • Use "UseDefaultGateway0" param to tell pppd to set the machine's default route, and to override the DNS servers, rather than supplementing them.
  • Allow LAN0 to be empty.
• Don't attempt to reuse a session when the old session is from a different user/server.
• Handle VPN servers with "pre-login-checks" configured. (thanks to Kazuyuki Saito).
• Due to a typo, resolvconf wasn't being used on linux even when present. (Thanks Fare and others)
• Fix crash in routespec_to_revdns when getting a /32 route.
• Miscellaneous other cleanups

Features

• Added ability to connect via a HTTPS proxy with a --proxy=hostname:port argument.

Features:

• Basic functionality on iPhone v2.0. Requires python and pyobjc, both of which you can install easily via Cydia. For now, at least, you'll have to run it in the terminal, and, since the iphone drops the net connection every time the phone sleeps, it's not really very usable.

Bugs:

• Fixed bug in DNS on linux. (too clever by far)
• Retry connecting a few times if the VPN fails to answer properly.

Features:

• Added support for the resolvconf DNS-manager on linux systems which have it installed.

Bugs:

• Made the netmask parser more forgiving, since apparently some people have their vpn servers set up oddly.
• If no DNS0 parameter is supplied by the VPN server, don't attempt to set up DNS overrides.

Features:

• Added a SIGUSR1 handler which prints some stuff.

Bugs:

• Fixed a bug that caused it to not work on OSX 10.4.
• Make the keepalive feature actually work.

New features:

• Now sends a little traffic over the connection at least every 5 minutes, to keep crappy home NAT devices from tearing down the TCP connection. (NetGear, with your 10 minute inactivity timeout...I'm looking at you, with disgust.)
• On OSX 10.5, make reverse DNS of VPN-remote IPs work right (this is only an issue on OSX to begin with, as linux doesn't support split-DNS anyhow.)

Bugs:

• Fixed bug with the way I called SSL_write causing "bad write retry" errors occasionally.
• On OSX 10.5, use the SystemConfiguration python module instead of execing scutil (revdns change runs afoul of scutil's 256char line limit).

• Don't assume the VPN ID is 0,4: actually read the page to find the right number.

Rewrote the f5vpn-login script to no longer require the "svpn" binary from F5. It now just requires python and a little platform-specific knowledge about setting up routes and dns (implemented for linux and osx, currently, feel free to contribute others).

Bonus: it works better now too:

• It actually shuts down the connection when you ask it to.
• On OSX, it uses the platform specific DNS setup features, which allows the dns information to not be overwritten periodically.