https://github.com/tazjin/watchblob

Connect to 2-factor WatchGuard VPNs on Linux with OpenVPN
https://github.com/tazjin/watchblob

openvpn vpn watchguard

Last synced: about 2 months ago
JSON representation

Connect to 2-factor WatchGuard VPNs on Linux with OpenVPN

• Host: GitHub
• URL: https://github.com/tazjin/watchblob
• Owner: tazjin
• Archived: true
• Created: 2017-02-11T11:27:56.000Z (almost 8 years ago)
• Default Branch: master
• Last Pushed: 2017-02-13T09:03:08.000Z (almost 8 years ago)
• Last Synced: 2024-08-05T09:15:13.785Z (5 months ago)
• Topics: openvpn, vpn, watchguard
• Language: Go
• Size: 7.81 KB
• Stars: 14
• Watchers: 4
• Forks: 5
• Open Issues: 1
• Metadata Files:
  • Readme: README.md

Awesome Lists containing this project

• awesome-network-stuff - **15**星 - factor WatchGuard VPNs on Linux with OpenVPN (<a id="7cf7e8a30b73997985f20698eaf6b0c9"></a>OpenVPN / <a id="8ea8f890cf767c3801b5e7951fca3570"></a>公网访问局域网)

README

        
Watchblob - WatchGuard VPN on Linux

===================================

This tiny helper tool makes it possible to use WatchGuard / Firebox / <> VPNs that use multi-factor authentication on Linux.

Rather than using OpenVPN's built-in dynamic challenge/response protocol, WatchGuard

has opted for a separate implementation negotiating credentials outside of the

OpenVPN protocol, which makes it impossible to start those connections solely by

using the `openvpn` CLI and configuration files.

What this application does has been reverse-engineered from the "WatchGuard Mobile VPN

with SSL" application on OS X.

I've published a [blog post](https://www.tazj.in/en/1486830338) describing the process

and what is actually going on in this protocol.

## Installation

Make sure you have Go installed and `GOPATH` configured, then simply

`go get github.com/tazjin/watchblob/...`.

## Usage

Right now the usage is very simple. Make sure you have the correct OpenVPN client

config ready (this is normally supplied by the WatchGuard UI) simply run:

```

watchblob vpnserver.somedomain.org username p4ssw0rd

```

The server responds with a challenge which is displayed to the user, wait until you

receive the SMS code or whatever and enter it. `watchblob` then completes the

credential negotiation and you may proceed to log in with OpenVPN using your username

and *the OTP token* (**not**  your password) as credentials.