Start/stop script for FortiClient VPN on Linux

FortiClientVPN

#!/usr/bin/env bash

# Start/stop FortiClient VPN
# Last modified: ons mar 15, 2023  03:47
# Sign: JN
# To disable starting forticlient after reboot:
# 1. Comment out the command (edit and add an `#` in front of the line) in file
#   `/opt/forticlient/start-fortitray-launcher.sh`
# 2. `sudo systemctl disable forticlient-scheduler`
# After step 1 and 2 above, forticlient daemon will not start after reboot. To
# start the VPN client however, you first need to start the daemon, then the
# client. This can be done with this script.

if [[ $# -ne 1 ]]; then
  echo "ERROR: expects one argument (start or stop)" >&2
  exit 1
fi

if [[ "$1" == '-h' || "$1" == '--help' ]] ; then
  echo -e "Description: Start or stop FortiClient VPN\nUsage: $0 stop|start\nNote: requires sudo privileges"
  exit 0
elif [[ "$1" == "start" ]] ; then
  echo "start forticlient"
  pgrep fctsched > /dev/null
  if [ $? -eq 1 ] ; then
    sudo systemctl start forticlient-scheduler
  fi
  forticlient &> /dev/null &
elif [[ "$1" == "stop" ]] ; then
  echo "stop forticlient"
  sudo systemctl stop forticlient-scheduler
else
  echo "ERROR: unknown argument ($1). Expects start or stop." >&2
  exit 1
fi

Using my current forticlient version (7.2.4.0809 on Ubuntu 22.04.4), the system start/stop doesn't work. I instead use a script that simply connects or disconnects:

#!/usr/bin/env bash

# Start/stop FortiClient VPN
# Last modified: tor feb 22, 2024  10:31
# Sign: JN
# Note: I did not (yet) manage to disable forticlient on startup - and
# easily restart(!) - with the latest version (7.2.3). The current
# version of this script just connects to NRM.

nrmuser='' # Provide user on nrmvpn
nrmvpn='' # Provide name of NRM VPN

if [[ $# -ne 1 ]]; then
  echo "ERROR: expects one argument (start, stop, or status)" >&2
  exit 1
fi

if [[ "$1" == '-h' || "$1" == '--help' ]] ; then
  echo -e "Description: Start or stop FortiClient VPN connection for user ${nrmuser} to '${nrmvpn}'\nUsage: $0 <start|stop|status>"
  echo -e "Need to provide NRM password and answer 'y' to cert warning"
  echo "When stopping, there will be a non-harmful, excpected Error: 'Can not connect to VPN server'"
  exit 0
elif [[ "$1" == "start" ]] ; then
  echo "start forticlient"
  forticlient vpn connect "${nrmvpn}" -u "${nrmuser}"
elif [[ "$1" == "stop" ]] ; then
  echo "stop forticlient"
  forticlient vpn disconnect
elif [[ "$1" == "status" ]] ; then
  echo "status forticlient"
  forticlient vpn status
else
  echo "ERROR: unknown argument ($1). Expects start, stop, or status." >&2
  exit 1
fi