VPN connection established but not used

[Stefano]

When I try to connect thru a VPNC connection, tun is created, but the connection itself is not used. Firefox shows my IP address instead of the one of the VPN, and I am not able to use my university services.

This is on
network-manager-vpnc:
  Installed: 0.7~~svn20080908t183521-0ubuntu1
  Candidate: 0.7~~svn20080908t183521-0ubuntu1
  Version table:
 *** 0.7~~svn20080908t183521-0ubuntu1 0
        500 http://us.archive.ubuntu.com intrepid/universe Packages
        100 /var/lib/dpkg/status

[newacct (newacct)]

I have a newly clean-installed Jaunty (9.04) on my computer and I can confirm that I have this same problem. The vpnc connection that I set up connects successfully, and even displays the welcome message from the VPN server, but my Internet connections do not actually go through the VPN (e.g. the IP address is still my own). It worked fine on Intrepid (8.10).

My version is
network-manager-vpnc:
  Installed: 0.7.1~rc4.20090316+bzr21-0ubuntu2
  Candidate: 0.7.1~rc4.20090316+bzr21-0ubuntu2
  Version table:
 *** 0.7.1~rc4.20090316+bzr21-0ubuntu2 0
        500 http://us.archive.ubuntu.com jaunty/universe Packages
        100 /var/lib/dpkg/status

[Mathieu Trudel-Lapierre (cyphermox)]

In the VPN configuration dialog, under the IPv4 Parameters page, please click "Routes..." and make sure the "Use this connection only for the networks it provides" checkbox is *unchecked*, then please try again and let us know of the results.

Thanks,

[newacct (newacct)]

Okay, it seems that unchecking that checkbox fixes it. What does that checkbox mean anyway? (Does it have any undesired effects?) Why did I not seem to have to need to do this in Intrepid? I figured out that that checkbox was checked because of the line "EnableLocalLAN=1" in the .pcf file that I imported. What does that PCF file option mean? and is it somehow incorrect?

[Mathieu Trudel-Lapierre (cyphermox)]

This checkbox (and the EnableLocalLAN pcf directive) essentially
enables or disables a feature called split-tunelling, which allows
you, when enabled, to connect to the VPN's network while still being
able to reach the networks that are routed on your network (accessible
directly by hitting a router on your network).

However, if you check that box, the default gateway route remains on
your local interface (wired or wireless), rather than on the VPN
interface, as it should if you want to access the internet, for
example, through the VPN.

Unchecked, the default gateway is set to the VPN interface, and any
network not directly known to your system as being local and
accessible directly on your wired interface would be passed through
the default gateway, and as such, through the VPN.

Mathieu Trudel
<email address hidden>

[Mathieu Trudel-Lapierre (cyphermox)]

Marking this bug as invalid as it's more of a configuration parameter that needs to be used or not depending on the user's environment, rather than an actual bug in the software.