내용으로 건너뛰기

Losing internet access with split tunnel on in aws client VPN

1

I have client VPN set up with split tunnel enabled and have just one route i.e. to target subnet in a VPC. I have gone throug other similar question on AWS re:Post and have made sure that I do not have 0.0.0.0 route in Routes associated with Cvpn endpoint. Also I am not supplying and DNS servers at the moment.

vpn-config local-route-table cvpn-route-table

I can see why I am loosing the internet access which is because a route entry is being pushed down to my local route table (i am using Linux Mint 21 and default openvpn client inbuilt into it to connect) for 0.0.0.0 -> 10.54.0.161 which does not make sense. That route entry should not be pushed by Cvpn to my host machine as I have split tunnel enabled.

Not sure what am I doing wrong.

4개 답변
1
수락된 답변

Hope this helps others having issues with CVPN on debian clients.

I had got in touch with AWS Business support about this and they have suggested a workaround in form of using the AWS Client VPN GUI that is available for Linux. When connecting through that software, the default route does not get added but if you use the default open vpn client that gets shipped with linux mint that the issue pops up again.

This should not be happening but they aren't sure about when AWS will prioritize fixing this. So the current solution is using the AWS CVPN GUI. Also the GUI is not supported for newer ubuntu versions but you will need to manually add a few dependencies and then it does work.

Thanks

답변함 3년 전
전문가
검토됨 2년 전
0

In case it helps anyone in the future: we fixed this on our end after an hour of research using this extra line of configuration in the ovpn file:

pull-filter ignore redirect-gateway

답변함 9달 전
  • pull-filter ignore redirect-gateway 100% worked for me. I use fedora as my main OS. AWS only has a vpn client for Ubuntu. Plus, we should NOT have to resort to ONLY being able to use the AWS client. That is dumb. So, add "pull-filter ignore redirect-gateway" to the config, and my split tunneling works now.

    Thank you Niels

0

I had the same problem on macOS, to fix that I used the following two commands to tackle the overwritten gateway:

  • sudo route delete <DESTINATION>
  • sudo route add <DESTINATION> <ADDR_GATEWAY_ROUTER>
답변함 일 년 전
0

Some guys of our team have the same issue. The weird thing is we all have MacOS and the same AWS VPN Client version. And only a few guys have the same issue. Please you have to fix that. We cannot work properly!!!

답변함 일 년 전

로그인하지 않았습니다. 로그인해야 답변을 게시할 수 있습니다.

좋은 답변은 질문에 명확하게 답하고 건설적인 피드백을 제공하며 질문자의 전문적인 성장을 장려합니다.

관련 콘텐츠