Juniper VPN Support

2 votes

avatar

Our most active external customer requires that we use the Juniper VPN (Juniper Secure Connect | Junos OS | Juniper Networks) to establish a remote connection with them. Would be good if this was supported natively.

All Comments (11)

avatar

Hello,

Thank you for the request. Do you know if the product has a Command Line Interface to establish connection, or something similar that would help us integrate with it?

Regards,

Hubert Mireault

avatar

Hi,

The AI help bot at Juniper Secure Connect | Junos OS | Juniper Networks replied with the following when I asked integrating the windows desktop client with a remote desktop manager

"The primary management is GUI-based on Windows, but CLI commands like rwscmd provide scripting flexibility for automation and integration.[1][3] Firewall-side configuration uses Junos OS CLI on SRX Series devices.[1][4]

For full details, see the Juniper Secure Connect User Guide.[1]"

The user guide can be found at Juniper Secure Connect User Guide

Unfortunately the user guide doesn't provide much details. Will try some other sources.

Regards,

Charles

avatar

Perfect, if you find out what commands are needed to establish the link, let us know and we'd be happy to look into integrating this. Sometimes, there's a CLI but it's just for configuring the application, not for actually establishing the VPN.

Regards,

Hubert Mireault

avatar

We've been able to successfully get the VPN client to open a new connection (and also close the connection) using the ncpclientcmd (C:\Program Files\Junpier\SecureConnect).

avatar

Do you run ncpclientcmd with any specific commands to start/close the VPN? Do you have a help topic regarding this command line interface?

Regards,

Hubert Mireault

avatar

Hi, having problems replying for some reason.

avatar

Sent on behalf of @charlesclayton

Here's the help topic for the command.

C:\Program Files\Juniper\SecureConnect>ncpclientcmd . exe /?

*****************************************************************************
* NcpClientCmd *
*****************************************************************************

Functions available:
ncpclientcmd /connect [ProfileName] [user <userid>] [pwd <password>]
ncpclientcmd /connectWait <Timeout>
ncpclientcmd /disconnect
ncpclientcmd /getConnectState
ncpclientcmd /getConnectionMedium
ncpclientcmd /getServiceState [Time]
ncpclientcmd /select <ProfileName>
ncpclientcmd /sleep <Time>
ncpclientcmd /start
ncpclientcmd /stop
ncpclientcmd /ginaInstall
ncpclientcmd /ginaUninst
ncpclientcmd /ginaInfo
ncpclientcmd /writeClientInfoCenterData [OutFileName]
ncpclientcmd /showLogs [Timer]

Further information about the individual commands:
NcpClientCmd [Command] ?

Explanation:
<parameter> = this parameter MUST be entered
[parameter] = this parameter is optional

C:\Program Files\Juniper\SecureConnect>

To connect, the /connect verb is used, followed by the required information.
However, you do 1st need to start the "connection manager" 1st. As this is done automatically on my PC, that isn't an issue. But at present, will need to change the VPN type from CMD to PowerShell

Best regards,

Vincent Forest

avatar

@Vincent Forest Thanks for posting the update for me.

avatar

Thank you for the additional information. We will open a ticket for this. It's possible we may not be able to test this internally, but the command line is described well enough that it shouldn't be too difficult to ensure it works in a real environment.

Regards,

Hubert Mireault

avatar

Many thanks.

avatar

Posting this on behalf of Charles' colleague, they have a working solution using the powershell-based VPN entry in RDM.

I'll add it as an attachment here, as it's not possible to post on the forum directly due to the script injection protection we have in place. Broadly, it details the connection and disconnection scripts required to achieve this. It's a good workaround while RDM doesn't currently support this integration as a full fledged entry type. Hopefully this can help the community in the mean time.

Regards,

Hubert Mireault

juniper-setup.docx