AWS Client VPN for Linux - AWS Client VPN

AWS Client VPN for Linux

The following procedures show how to install the AWS provided client for Linux, and to establish a VPN connection using the AWS provided client. The AWS provided client for Linux does not support automatic updates.

Requirements

To use the AWS provided client for Linux, the following is required:

  • Ubuntu 18.04 LTS or Ubuntu 20.04 LTS (AMD64 only)

The client reserves TCP port 8096 on your computer. For Client VPN endpoints that use SAML-based federated authentication (single sign-on) the client reserves TCP port 35001.

Before you begin, ensure that your Client VPN administrator has created a Client VPN endpoint and provided you with the Client VPN endpoint configuration file.

Installation

There are multiple methods that can be used to install the AWS provided client for Linux. Use one of the methods provided in the following options. Before you begin, ensure that you've read the requirements.

Option 1 -- Install via package repository
  1. Add the AWS VPN Client public key to your Ubuntu OS.

    wget -qO- https://d20adtppz83p9s.cloudfront.net/GTK/latest/debian-repo/awsvpnclient_public_key.asc | sudo tee /etc/apt/trusted.gpg.d/awsvpnclient_public_key.asc
  2. Use the applicable command to add the repository to your Ubuntu OS, depending on your Ubuntu version:

    Ubuntu 18.04

    echo "deb [arch=amd64] https://d20adtppz83p9s.cloudfront.net/GTK/latest/debian-repo ubuntu-18.04 main" | sudo tee /etc/apt/sources.list.d/aws-vpn-client.list

    Ubuntu 20.04

    echo "deb [arch=amd64] https://d20adtppz83p9s.cloudfront.net/GTK/latest/debian-repo ubuntu-20.04 main" | sudo tee /etc/apt/sources.list.d/aws-vpn-client.list
  3. Use the following command to update the repositories on your system.

    sudo apt-get update
  4. Use the following command to install the AWS provided client for Linux.

    sudo apt-get install awsvpnclient
Option 2 -- Install using the .deb package file
  1. Download the .deb file from AWS Client VPN download or by using the following command.

    curl https://d20adtppz83p9s.cloudfront.net/GTK/latest/awsvpnclient_amd64.deb -o awsvpnclient_amd64.deb
  2. Install the AWS provided client for Linux using the dpkg utility.

    sudo dpkg -i awsvpnclient_amd64.deb
Option 3 -- Install the .deb package using Ubuntu Software Center
  1. Download the .deb package file from AWS Client VPN download .

  2. After downloading the .deb package file, use the Ubuntu Software Center to install the package. Follow the steps for installing from a standalone .deb package using Ubuntu Software Center, as described on the Ubuntu Wiki.

Connecting

The AWS provided client is also referred to as the AWS VPN Client in the following steps.

To connect using the AWS provided client for Linux
  1. Open the AWS VPN Client app.

  2. Choose File, Manage Profiles.

  3. Choose Add Profile.

    
      Linux add profile
  4. For Display Name, enter a name for the profile.

  5. For VPN Configuration File, browse to the configuration file that you received from your Client VPN administrator. Choose Open.

  6. Choose Add Profile.

    
      Linux add profile
  7. In the AWS VPN Client window, ensure that your profile is selected, and then choose Connect. If the Client VPN endpoint has been configured to use credential-based authentication, you'll be prompted to enter a user name and password.

    
      Linux add profile
  8. To view statistics for your connection, choose Connection, Show Details.

    
      macOS show details
  9. To disconnect, in the AWS VPN Client window, choose Disconnect.

    
      Linux disconnect

Release notes

The following table contains the release notes and download links for the current and previous versions of AWS Client VPN for Linux.

Version Changes Date Download link
3.12.2
  • Resolved a SAML authentication issue with Chromium-based browsers since version 123.

April 11, 2024 Download version 3.12.2

sha256: f7178c33797740bd596a14cbe7b6f5f58fb79d17af79f88bd8801353a7571a7d

3.12.1
  • Improved security posture.

February 16, 2024 Download version 3.12.1

sha256: 547c4ffd3e35c54db8e0b792aed9de1510f6f31a6009e55b8af4f0c2f5cf31d0

3.12.0
  • Fixed connectivity issues for some LAN configurations.

December 19, 2023 Download version 3.12.0

sha256: 9b73987309f1dca1960a322c5dd86eec1568ed270bfd25f78cc430e3b5f85cc1

3.11.0
  • Rollback for "Fixed connectivity issues for some LAN configurations".

  • Improved accessibility.

December 6, 2023 Download version 3.11.0

sha256: 86c0fa1bf1c97194082835a739ec7f1c87e540194955f414a35c679b94538970

3.10.0
  • Fixed connectivity issues for some LAN configurations.

  • Improved accessibility.

December 6, 2023 Download version 3.10.0

sha256: e7450b2490f3b96ab7d589a8000d838d9fd2adcdd72ae80666c4c0d900687e51

3.9.0
  • Fixed a connectivity issue when NAT64 is enabled in the client network.

  • Minor bug fixes and enhancements.

August 24, 2023 Download version 3.9.0

sha256: 6cde9cfff82754119e6a68464d4bb350da3cb3e1ebf9140dacf24e4fd2197454

3.8.0
  • Improved security posture.

August 3, 2023 Download version 3.8.0

sha256: 5fe479236cc0a1940ba37fe168e551096f8dae4c68d45560a164e41edea3e5bd

3.7.0
  • Improved security posture.

July 15, 2023 No longer supported
3.6.0
  • Rolled back changes from 3.5.0.

July 15, 2023 No longer supported
3.5.0
  • Improved security posture.

July 14, 2023 No longer supported
3.4.0
  • Added support for "verify-x509-name" OpenVPN flag.

February 14, 2023 No longer supported
3.1.0
  • Fixed issue for drive type detection.

  • Improved security posture.

May 23, 2022 No longer supported
3.0.0
  • Fixed the banner message not being displayed when using federated authentication.

  • Fixed banner text display for longer text and specific character sequences.

  • Enhanced security posture.

March 3, 2022 No longer supported.
2.0.0
  • Added support for banner text after new connection is established.

  • Removed ability to use pull-filter in relation to echo. i.e. pull-filter * echo

  • Minor bug fixes and enhancements.

January 20, 2022 No longer supported.
1.0.3
  • Fixed federated authentication connection attempt in some cases.

  • Minor bug fixes and enhancements.

November 8, 2021 No longer supported.
1.0.2
  • Added support for OpenVPN flags: connect-retry-max, dev-type, keepalive, ping, ping-restart, pull, rcvbuf, server-poll-timeout.

  • Minor bug fixes and enhancements.

September 28, 2021 No longer supported.
1.0.1
  • Enabled option to quit from Ubuntu application bar.

  • Added support for OpenVPN flags: inactive, pull-filter, route.

  • Minor bug fixes and enhancements.

August 4, 2021 No longer supported.
1.0.0 The initial release. June 11, 2021 No longer supported.