Fix for WSL 2 connectivity with CheckPoint VPN · GitHub

2024-11-22 @echo off : : Script is disable to automatically disable and re - enable the WSL network adapter when connectand disconnect fr

	@echo off

	: : Script is disable to automatically disable and re – enable the WSL network adapter when connectand disconnect from CheckPoint VPN .
	: :
	: : IMPORTANT: Must be run as administrator
	: :
	: : @author Thiago Arruda <thiarruda@gmail.com>

	: : Path to CheckPoint ‘s CLI client .
	: : Example: set checkpoint_cli=”C:\Program Files (x86)\CheckPoint\Endpoint Connect\trac.exe”
	set checkpoint_cli=“<path_to_trac.exe>“

	if not exist % checkpoint_cli% (
	echo ERROR: trac.exe was not found at this location: % checkpoint_cli%
	echo.
	pause
	call :do_exit
	)

	: : Change these according to your connection needs
	: : The script is set to use a certificate, and will prompt you the for password
	: : If you are using an username instead , change ” -f % cert_path% ” to ” -u % username% “
	set vpn_host=“<your_vpn_host>“
	set cert_path=“<path_to_cert_file>“
	: : set username=”<your_username>”
	set checkpoint_options=-s %vpn_host% -f %cert_path%

	: : comment this block if you are using username instead of certificate
	if not exist %cert_path% (
	echo ERROR: no certificate found at this location: %cert_path%
	echo.
	pause
	call :do_exit
	)

	:mainloop
	call :show_menu

	if “%option%“ = = “1“ (call :do_connect )else ^
	if “%option%“ = = “2“ (call :do_disconnect )else ^
	if “%option%“ = = “3“ (call :do_exit )else ^
	call :do_invalid

	pause
	call :mainloop

	:do_connect
	if “% status%“ = = “Connected“ (
	echo.
	echo ERROR: You are already connected
	echo.
	exit /B1
	)
	call :disable_network
	call :connect
	call :enable_network
	exit /B0

	:do_disconnect
	if “% status%“ = = “disconnected“ (
	echo.
	echo ERROR: You are not connected
	echo.
	exit /B1
	)
	call :disable_network
	call :disconnect
	call :enable_network
	exit /B0

	:do_invalid
	echo.
	echo ERROR: invalid option: %option%
	echo.
	exit /B0

	:do_exit
	exit 0

	:connect
	echo connectto the VPN …
	set “psCommand=powershell -Command “$ pword= read – host ‘ Enter Password ‘ -AsSecureString ;^
	$BSTR=[System.Runtime.InteropServices.Marshal]: :SecureStringToBSTR($pword); ^
	[System.Runtime.InteropServices.Marshal]: :PtrToStringAuto($BSTR)““
	for /f “usebackq delims=“ % % p in (`%psCommand%` )do set password=% % p

	IF “% password%“= =““ (
	echo.
	echo ERROR: no password provided
	echo.
	exit /B1
	)

	% checkpoint_cli% connect% checkpoint_options% -p % password%

	call :check_status
	if not “% status%“ = = “Connected“ (
	echo.
	echo ERROR: failed to connectto “%vpn_host%“. Check the output above.
	echo.
	exit /B1
	)

	exit /B0

	:disconnect
	echo Disconnecting from VPN…
	% checkpoint_cli% disconnect

	call :check_status
	if not “% status%“ = = “disconnected“ (
	echo.
	echo ERROR: failed to disconnect. Check the output above.
	echo.
	exit /B1
	)

	exit /B0

	:show_menu
	set option=““
	call :check_status
	cls
	echo.
	echo : : : : : : : : : : : : : : : : : : : : : :
	echo :+: :+: :+: :+: :+:+: :+:
	echo +:+ +:+ +:+ +:+ :+:+:+ +:+
	echo +#+ +:+ +#++:++#+ +#+ +:+ +#+
	echo + # + + # + + # + + # + + # + # + #
	echo #+#+#+# #+# #+# #+#+#
	echo ### ### ### ####
	echo.
	echo STATUS: % status%
	echo.
	echo [1] Connect
	echo [2] Disconnect
	echo [3] Exit
	echo.
	set /p option=“choose an option :“

	exit /B0

	:disable_network
	echo.
	echo disable WSL network …
	netsh interfaceset interface“vEthernet (WSL)“ disable
	if ERRORLEVEL 1 (
	echo.
	echo ERROR: failed to disable the network interface“vEthernet (WSL)“ .
	echo.
	exit /B1
	)
	exit /B0

	:enable_network
	echo.
	echo Enabling WSL network…
	netsh interfaceset interface“vEthernet (WSL)“ enable
	if ERRORLEVEL 1 (
	echo.
	echo ERROR: failed to enable the network interface“vEthernet (WSL)“.
	echo.
	exit /B1
	)
	exit /B0

	:check_status
	% checkpoint_cli% info \| find /i“status : connect“ >nul 2>&1
	if not errorlevel 1 (
	set status=Connected
	)else (
	set status=disconnected
	)
	exit /B0

No results found