network manager open connect establishes connect but vpn does not work after connection is establlished.

[Lafa]

I tried using network-manager in Ubuntu Gnome 15.10, it does establish the connection but I can not load any web pages or connect to any company machines.

This work fine in Ubuntu 15.04.

I also tried openconnect command line like this:

sudo openconnect --user=USER server/PATH

It also connects but even on the command line I have to add a default route to the tun0 device

sudo route add default gw IPADDRESS tun0

After that it works on cmd line, using network-manger I was not able to make it work.

DNS seems to be working great, after the NetworkManager established the vpn connection,
But I'm able to route any ip traffic.

This the Routing table using Ubuntu gnome Network Manager openconnect, after the vpn connection is established.

$ sudo route -n
Destination Gateway Genmask Flags Metric Ref Use Iface
0.0.0.0 0.0.0.0 0.0.0.0 U 50 0 0 vpn0
0.0.0.0 192.168.254.254 0.0.0.0 UG 600 0 0 wlp1s0
10.87.160.0 0.0.0.0 255.255.224.0 U 50 0 0 vpn0
169.254.0.0 0.0.0.0 255.255.0.0 U 1000 0 0 virbr0
192.168.122.0 0.0.0.0 255.255.255.0 U 0 0 0 virbr0
192.168.254.0 0.0.0.0 255.255.255.0 U 600 0 0 wlp1s0
216.145.48.150 192.168.254.254 255.255.255.255 UGH 600 0 0 wlp1s0

ProblemType: Bug
DistroRelease: Ubuntu 15.10
Package: network-manager-openconnect 1.0.2-1build1
ProcVersionSignature: Ubuntu 4.2.0-12.14-generic 4.2.1
Uname: Linux 4.2.0-12-generic x86_64
ApportVersion: 2.19-0ubuntu1
Architecture: amd64
CurrentDesktop: GNOME
Date: Mon Oct 5 03:27:06 2015
InstallationDate: Installed on 2015-09-28 (7 days ago)
InstallationMedia: Ubuntu-GNOME 15.10 "Wily Werewolf" - Alpha amd64 (20150924)
ProcEnviron:
 TERM=xterm-256color
 PATH=(custom, no user)
 XDG_RUNTIME_DIR=<set>
 LANG=en_US.UTF-8
 SHELL=/bin/bash
SourcePackage: network-manager-openconnect
UpgradeStatus: No upgrade log present (probably fresh install)

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[swatteam229 (swatteam229)]

Please increase the importance if possible.
openconnect VPN in 15.10 is not working for me but does have the wifi driver for MSI GT72 ( Awesome ). 15.04 has the working VPN but not the wifi..

Thanks you all for Ubuntu !
James

[Noel Burton-Krahn (noel-burton-krahn)]

This fixes the problem for me after vpnc connected:

    sudo ip route add default dev tun0

I wonder if vpnc is failing to do this itself, or if NetworkManager is getting in the way.

[Lafa (luis-alves)]

O posted a permanent fix to the vpnc script in here, that works for openconnect on the command line.
http://askubuntu.com/questions/681687/openconnect-vpn-setup-is-failing-in-ubuntu-15-10

[Thomas Uebel (t-uebel)]

The proposed permanent fix mentioned in #5 does not work for me.

[Ivo Raisr (ivosh-d)]

I am also affected by this bug. The following workaround works for me:
sudo ip route replace default via 0.0.0.0 dev tun0

I can provide lots of debugging information if needed.

[Steve Hellwege (hellwege)]

A permanent fix that worked:

Create a file: /etc/vpnc/post-connect.d/fix-default-route

Contents:

ip route replace default via 0.0.0.0 dev tun0

[Launchpad Janitor (janitor)]

Status changed to 'Confirmed' because the bug affects multiple users.

[Emilio Devspark (ecorengia)]

Similar thing happens in Xubuntu 16.04 LTS "Xenial Xerus" - beta 2.
I'm able to connect eventually, but I'm getting disconnected constantly from OpenVPN client.

[Blackgr (blackfate86)]

Hello,

A bit late to the party. Have you tried changing the tun0 mss?

sudo iptables -A OUTPUT -o tun0 -p tcp -m tcp --tcp-flags SYN,RST SYN -j TCPMSS --set-mss 1362

Thanks,
Alex

[Mike Miller (mtmiller)]

Reassigning from openconnect to vpnc-scripts, openconnect itself has nothing to do with configuring the routing table after establishing a VPN connection.

Does this bug actually affect openconnect command-line connections, or only connections established using NetworkManager?

[Moritz Baumann (mo42)]

Command-line connections are not affected anymore, those have been fixed by some update in the meantime. Only connections via the NetworkManager plugin are still affected.

[Akdor 1154 (akdor1154)]

This is still broken. The post-connect.d workarounds don't work because NetworkManager doesn't get openconnect to use vpnc-scripts any more. So the problem is with nm-openconnect-service-openconnect-helper I guess.

When debugging passed env vars I get (extract)
Jul 07 08:48:45 Herbie NetworkManager[634766]: CISCO_SPLIT_INC_2_MASKLEN=0
Jul 07 08:48:45 Herbie NetworkManager[634766]: LANGUAGE=en_AU:en
Jul 07 08:48:45 Herbie NetworkManager[634766]: NM_DBUS_SERVICE_OPENCONNECT=org.freedesktop.NetworkManager.openconnect.Connection_29
Jul 07 08:48:45 Herbie NetworkManager[634766]: NM_VPN_LOG_SYSLOG=1
Jul 07 08:48:45 Herbie NetworkManager[634766]: CISCO_SPLIT_INC_0_MASKLEN=32
Jul 07 08:48:45 Herbie NetworkManager[634766]: PWD=/
Jul 07 08:48:45 Herbie NetworkManager[634766]: CISCO_SPLIT_INC_1_MASKLEN=32
Jul 07 08:48:45 Herbie NetworkManager[634766]: LANG=en_AU.UTF-8
Jul 07 08:48:45 Herbie NetworkManager[634766]: CISCO_SPLIT_INC_2_ADDR=0.0.0.0
Jul 07 08:48:45 Herbie NetworkManager[634766]: INTERNAL_IP4_NETADDR=192.168.220.116
Jul 07 08:48:45 Herbie NetworkManager[634766]: CISCO_SPLIT_INC_0_ADDR=10.241.17.31
Jul 07 08:48:45 Herbie NetworkManager[634766]: CISCO_CSTP_OPTIONS=split-include=10.241.17.31/32
Jul 07 08:48:45 Herbie NetworkManager[634766]: split-include=10.241.17.30/32
Jul 07 08:48:45 Herbie NetworkManager[634766]: split-include=0.0.0.0/0
Jul 07 08:48:45 Herbie NetworkManager[634766]: search=officeworks.internal
Jul 07 08:48:45 Herbie NetworkManager[634766]: DNS=10.241.17.31
Jul 07 08:48:45 Herbie NetworkManager[634766]: DNS=10.241.17.30
Jul 07 08:48:45 Herbie NetworkManager[634766]: netmask=255.255.255.255
Jul 07 08:48:45 Herbie NetworkManager[634766]: ipaddr=192.168.220.116
Jul 07 08:48:45 Herbie NetworkManager[634766]: INVOCATION_ID=e13e358d737b41ef83b74684c4fdcef3
Jul 07 08:48:45 Herbie NetworkManager[634766]: CISCO_SPLIT_INC_1_MASK=255.255.255.255
Jul 07 08:48:45 Herbie NetworkManager[634766]: INTERNAL_IP4_DNS=10.241.17.30 10.241.17.31
Jul 07 08:48:45 Herbie NetworkManager[634766]: INTERNAL_IP4_NETMASK=255.255.255.255
Jul 07 08:48:45 Herbie NetworkManager[634766]: CISCO_SPLIT_INC=3
Jul 07 08:48:45 Herbie NetworkManager[634766]: INTERNAL_IP4_NETMASKLEN=32
Jul 07 08:48:45 Herbie NetworkManager[634766]: INTERNAL_IP4_MTU=1422
Jul 07 08:48:45 Herbie NetworkManager[634766]: CISCO_SPLIT_INC_1_ADDR=10.241.17.30
Jul 07 08:48:45 Herbie NetworkManager[634766]: SHLVL=1
Jul 07 08:48:45 Herbie NetworkManager[634766]: VPNGATEWAY=MYCOMPANYVPNIP
Jul 07 08:48:45 Herbie NetworkManager[634766]: CISCO_DEF_DOMAIN=MYCOMPANY.internal
Jul 07 08:48:45 Herbie NetworkManager[634766]: INTERNAL_IP4_ADDRESS=192.168.220.116
Jul 07 08:48:45 Herbie NetworkManager[634766]: CISCO_SPLIT_INC_0_MASK=255.255.255.255
Jul 07 08:48:45 Herbie NetworkManager[634766]: TUNDEV=vpn0
Jul 07 08:48:45 Herbie NetworkManager[634766]: CISCO_SPLIT_INC_2_MASK=0.0.0.0
Jul 07 08:48:45 Herbie NetworkManager[634766]: GIO_USE_VFS=local
Jul 07 08:48:45 Herbie NetworkManager[634766]: JOURNAL_STREAM=9:24405
Jul 07 08:48:45 Herbie NetworkManager[634766]: PATH=/usr/local/sbin:/usr/local/bin:/usr/sbin:/usr/bin:/sbin:/bin:/snap/bin
Jul 07 08:48:45 Herbie NetworkManager[634766]: reason=connect
Jul 07 08:48:...

[Akdor 1154 (akdor1154)]

Opened upstream: https://gitlab.com/openconnect/openconnect/-/issues/162