Hi *,
I'm using PulseSecure v. 22.2.1.1295 on Linux (Lubuntu 22.10). I can successfully establish a VPN connection, but my traffic does not get routed through the VPN.
It seems to be an issue with the default route, which is still set to my public IP:
(base) ➜ ~ ip r default via 192.168.1.1 dev wlp3s0 proto dhcp src 192.168.1.4 metric 600 130.223.xxx.xxx via 192.168.1.1 dev wlp3s0 metric 600 192.168.1.0/24 dev wlp3s0 proto kernel scope link src 192.168.1.4 metric 600 192.168.1.1 dev wlp3s0 scope link metric 600
What can I do to fix this issue?
Thanks.
I am actually not sure what the 168.192.1.0/24 is about... Maybe it is related to the problem?
"ip a" gives me this:
(base) ➜ ~ ip a 1: lo: <LOOPBACK,UP,LOWER_UP> mtu 65536 qdisc noqueue state UNKNOWN group default qlen 1000 link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00 inet 127.0.0.1/8 scope host lo valid_lft forever preferred_lft forever inet6 ::1/128 scope host valid_lft forever preferred_lft forever 2: enp2s0f0: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast state DOWN group default qlen 1000 link/ether 8c:8c:aa:86:4a:c0 brd ff:ff:ff:ff:ff:ff 3: enx00e04c78ec56: <NO-CARRIER,BROADCAST,MULTICAST,UP> mtu 1500 qdisc pfifo_fast state DOWN group default qlen 1000 link/ether 00:e0:4c:78:ec:56 brd ff:ff:ff:ff:ff:ff 4: wlp3s0: <BROADCAST,MULTICAST,UP,LOWER_UP> mtu 1500 qdisc noqueue state UP group default qlen 1000 link/ether 64:bc:58:e2:66:57 brd ff:ff:ff:ff:ff:ff inet 192.168.1.4/24 brd 192.168.1.255 scope global dynamic noprefixroute wlp3s0 valid_lft 76786sec preferred_lft 76786sec inet6 2a04:ee41:83:a46d:b9e1:1e82:1444:3c53/64 scope global temporary dynamic valid_lft 595189sec preferred_lft 76299sec inet6 2a04:ee41:83:a46d:3a82:b37c:e17f:2168/64 scope global dynamic mngtmpaddr noprefixroute valid_lft 2006054630sec preferred_lft 2006054630sec inet6 fe80::494d:834b:2699:b352/64 scope link noprefixroute valid_lft forever preferred_lft forever 6: tun0: <POINTOPOINT,MULTICAST,NOARP> mtu 1400 qdisc pfifo_fast state DOWN group default qlen 500 link/none
("tun0" is the device set up by Pulse Secure, I wonder why it has "state DOWN"...?)
When I disconnect the VPN connection, the alternative route is still there:
(base) ➜ ~ ip r default via 192.168.1.1 dev wlp3s0 proto dhcp src 192.168.1.4 metric 600 192.168.1.0/24 dev wlp3s0 proto kernel scope link src 192.168.1.4 metric 600