How to route my traffic through the VPN
manmad dvb12er
dvb12er at yandex.com
Thu Aug 28 08:12:19 PDT 2014
Well I guess the problem is in the server, when I add route that uses vpn0 for specific addresses, I can't access it. Thanks for your support David, really appreciate it.
28.08.2014, 18:11, "manmad dvb12er" <dvb12er at yandex.com>:
> Can't change the server config right now.
> When I write exec /etc/vpnc/vpnc-script the terminal closes immediately.
> I add "unset CISCO_SPLIT_INC" to /etc/vpnc/vpnc-script (first line), executed open connect from the command line, and my routing table is the same but tun0 is used instead vpn0:
> Kernel IP routing table
> Destination Gateway Genmask Flags Metric Ref Use Iface
> 0.0.0.0 10.0.0.138 0.0.0.0 UG 0 0 0 wlan0
> 10.0.0.0 0.0.0.0 255.0.0.0 U 9 0 0 wlan0
> 10.100.100.0 0.0.0.0 255.255.255.0 U 0 0 0 tun0
> xx.yy.zz.cc 10.0.0.138 255.255.255.255 UGH 0 0 0 wlan0
> 192.168.1.0 0.0.0.0 255.255.255.0 U 0 0 0 tun0
> 192.168.2.0 0.0.0.0 255.255.255.0 U 0 0 0 tun0
>
> I'm really confused...
>
> 28.08.2014, 17:58, "David Woodhouse" <dwmw2 at infradead.org>:
>> On Thu, 2014-08-28 at 17:54 +0400, manmad dvb12er wrote:
>>> Thanks a lot for your quick replay.
>>> Regards the script, I forgot to mention that I used it from the
>>> command line.
>>> Anyway, the "Use this connection only for resources on its network" is
>>> not set.
>>> How can I change the default route?
>>> I tried:
>>> sudo route add -net 0.0.0.0 vpn0
>>> But it didn't worked: I had no internet access. Am I doing something
>>> wrong?
>> The problem here is that your VPN server isn't giving you the network
>> configuration that you want. I assume you aren't able to fix that?
>>
>> The simplest way to override it is to use a vpnc-script of your own
>> which just unsets CISCO_SPLIT_INC and then runs the original
>> vpnc-script.
>>
>> That way, it's 'deleting' the explicit routes that the VPN server gives
>> you, and that means vpnc-script will set up the default route instead.
>>
>> #!/bin/sh
>>
>> unset CISCO_SPLIT_INC
>> exec /etc/vpnc/vpnc-script
>>
>> --
>> dwmw2
More information about the openconnect-devel
mailing list