2 votes
Our most active external customer requires that we use the Juniper VPN (Juniper Secure Connect | Junos OS | Juniper Networks) to establish a remote connection with them. Would be good if this was supported natively.
Hello,
Thank you for the request. Do you know if the product has a Command Line Interface to establish connection, or something similar that would help us integrate with it?
Regards,
Hubert Mireault
Hi,
The AI help bot at Juniper Secure Connect | Junos OS | Juniper Networks replied with the following when I asked integrating the windows desktop client with a remote desktop manager
"The primary management is GUI-based on Windows, but CLI commands like rwscmd provide scripting flexibility for automation and integration.[1][3] Firewall-side configuration uses Junos OS CLI on SRX Series devices.[1][4]
For full details, see the Juniper Secure Connect User Guide.[1]"
The user guide can be found at Juniper Secure Connect User Guide
Unfortunately the user guide doesn't provide much details. Will try some other sources.
Regards,
Charles
Perfect, if you find out what commands are needed to establish the link, let us know and we'd be happy to look into integrating this. Sometimes, there's a CLI but it's just for configuring the application, not for actually establishing the VPN.
Regards,
Hubert Mireault
We've been able to successfully get the VPN client to open a new connection (and also close the connection) using the ncpclientcmd (C:\Program Files\Junpier\SecureConnect).
Do you run ncpclientcmd with any specific commands to start/close the VPN? Do you have a help topic regarding this command line interface?
Regards,
Hubert Mireault
Hi, having problems replying for some reason.
Sent on behalf of @charlesclayton
Here's the help topic for the command.
C:\Program Files\Juniper\SecureConnect>ncpclientcmd . exe /?
*****************************************************************************
* NcpClientCmd *
*****************************************************************************
Functions available:
ncpclientcmd /connect [ProfileName] [user <userid>] [pwd <password>]
ncpclientcmd /connectWait <Timeout>
ncpclientcmd /disconnect
ncpclientcmd /getConnectState
ncpclientcmd /getConnectionMedium
ncpclientcmd /getServiceState [Time]
ncpclientcmd /select <ProfileName>
ncpclientcmd /sleep <Time>
ncpclientcmd /start
ncpclientcmd /stop
ncpclientcmd /ginaInstall
ncpclientcmd /ginaUninst
ncpclientcmd /ginaInfo
ncpclientcmd /writeClientInfoCenterData [OutFileName]
ncpclientcmd /showLogs [Timer]
Further information about the individual commands:
NcpClientCmd [Command] ?
Explanation:
<parameter> = this parameter MUST be entered
[parameter] = this parameter is optional
C:\Program Files\Juniper\SecureConnect>
To connect, the /connect verb is used, followed by the required information.
However, you do 1st need to start the "connection manager" 1st. As this is done automatically on my PC, that isn't an issue. But at present, will need to change the VPN type from CMD to PowerShell
Best regards,
Vincent Forest
@Vincent Forest Thanks for posting the update for me.
Thank you for the additional information. We will open a ticket for this. It's possible we may not be able to test this internally, but the command line is described well enough that it shouldn't be too difficult to ensure it works in a real environment.
Regards,
Hubert Mireault
Many thanks.
Posting this on behalf of Charles' colleague, they have a working solution using the powershell-based VPN entry in RDM.
I'll add it as an attachment here, as it's not possible to post on the forum directly due to the script injection protection we have in place. Broadly, it details the connection and disconnection scripts required to achieve this. It's a good workaround while RDM doesn't currently support this integration as a full fledged entry type. Hopefully this can help the community in the mean time.
Regards,
Hubert Mireault
juniper-setup.docx