Cato VPN Client for Linux
Installation and User Guide
Document Version 2.0
December 2019
Cato VPN Client for Linux Installation and User Guide
© C OPYRIGHT 2019 BY C ATO NETWORKS L TD
This document and all of its content, design and structure, and all trademarks, trade names and logos herein, and all intellectual property rights
thereto are owned by Cato Networks Ltd and its affiliates and licensors and are deemed as Cato Networks Ltd's confidential information and may
not be copied, disclosed to third parties, made available to the public or distributed. This document and all data herein are provided "as is" and
without warranties of any kind, either express or implied. All technical data herein is subject to U.S., Israeli and possibly other countries’ export
control and sanctions laws, regulations and requirements. You have sole liability and responsibility to obtain all permits and licenses required for
export or re-export of this document. This document and its use are subject to the agreement entered between you and Cato Networks Ltd, and
you shall destroy all copies thereof upon expiration or termination of said agreement.
Cato Networks 2
Cato VPN Client for Linux Installation and User Guide
1. Scope
Table of Contents
1. Scope 3
2. Downloading Your Client for Installation 3
3. Installing and Running the Cato VPN Client for Linux Client 3
4. Additional Resources 5
1. Scope
This guide describes how to download, install and use the Cato VPN Client on your Linux device.
2. Downloading Your Client for Installation
1. Click Linux and click the required VPN Client.
The installation file is downloaded to your
device.
3. Installing and Running the Cato VPN Client for Linux
Client
To install the Cato Client:
1. Run the Cato Client file that you download from the User Portal:
cato-install-<OS name>.sh
To run the Cato Client:
1. In the directory where the client was installed, run the following command in a separate
terminal:
./cclient.sh start
with the required parameters as described in the table below.
Cato Networks 3
Cato VPN Client for Linux Installation and User Guide
3. Installing and Running the Cato VPN Client for Linux Client
Parameter Description
--address ip-address Directs the client to connect to a specific Cato server
(contact Cato Support staff for the server IP address).
Normally, the client automatically connects to the
best node in the Cato network.
--append {head|tail} Preserves the existing configuration in
/etc/resolv.conf.
When connected, the Cato client replaces
/etc/resolv.conf with the DNS configuration received
from Cato. Using this parameter appends the Cato
configuration to the existing configuration.
● head - adds the DNS configuration from Cato
before the existing configuration, giving
preference to the Cato configuration.
● tail - adds the DNS configuration from Cato after
the existing configuration, giving preference to
the existing configuration.
In both cases, /etc/resolv.conf is restored to its
original contents on disconnection.
Note: If Split Tunnel is enabled in the Cato
Management Application, this parameter is
ignored and the client always replaces the
contents of /etc/resolv.conf.
--load file Uses the parameter values stored in the file
previously with --save.
You can override any stored setting by specifying it
on the command line.
Since the credentials are also stored in this file,
make sure you keep it private as anyone can use this
file to connect with the saved credentials. The
password is saved in hashed form (SHA-256 with
salt).
Alternately, you can store an empty or incorrect
password in the file and specify the correct one on
the command line. For example:
--load _file_ --password '******'
Cato Networks 4
Cato VPN Client for Linux Installation and User Guide
4. Additional Resources
Parameter Description
--metric metric The metric for the route created for VPN traffic (see
--route).
If not specified, this route has the highest priority on
the system ( identical to specifying --metric 0)).
--reconn seconds Following a disconnect, the number of seconds the
client waits before attempting to reconnect. The
client attempts to reconnect at this interval until a
connection is established or the client is stopped
externally.
If this parameter is not specified, the client attempts
to reconnect once and if unsuccessful, exits
immediately.
--route subnet A single subnet that is routed to the tunnel instead of
the default route. For example:
--route 10.24.0.0/16 creates a specific route so only
this subnet is routed through VPN.
If not specified, the client adds a default route so all
traffic is routed through the VPN on the device
(identical to specifying --route 0.0.0.0/0).
Note: If Split Tunnel is enabled in the Cato
Management Application, this parameter is
ignored.
--save file Saves all arguments passed on the command line to
the given file for use with the --load parameter.
--show file Display the settings stored in the file using --save.
--user, --account, --password User's VPN credentials.
4. Additional Resources
Online documentation
Online documentation is available through the Cato Management Application.
Contact Support
Following are the channels for contacting Cato Networks Support:
l Cato Networks Support Portal: A self-service support web site that offers a full
range of customer support features, such as: Opening, updating and tracking
Cato Networks 5
Cato VPN Client for Linux Installation and User Guide
4. Additional Resources
technical support incidents quickly and conveniently. Finding technical doc-
uments, FAQs, using the new and robust Knowledge Base. Downloading doc-
umentation, full products guides, product updates, notifications etc. Sharing best
practices and troubleshoot problems with others via tan interactive community.
Access Cato Networks Online Support, by browsing https://sup-
port.catonetworks.com and register your support account.
l Email: Email services, allowing you to create technical tickets in our system eas-
ily, by sending email to [support@catonetworks.com](sup-
port@catonetworks.com).
l Chat: Chat services are part of Cato Management Application, after login you
have the option to chat with a Technical Support Engineer representatives based
on an available free seat.
l Phone: Talk Services, 24x7x365, allowing you to call directly to Cato Support. All
calls are recorded to further improve our services and for quality assurance pur-
poses.
USA: +1 (505) 333-4070
United Kingdom: +44 114 303 3899
Israel: +972 3 720 7171
l Text message: To create support tickets with Cato Networks, text your inquiry to
the following text message numbers:
USA: +1 (201) 890-7666
United Kingdom: +44 1606 800066
Israel: +972 52 628 5630
Cato Networks 6
