I am connecting to a corporate VPN gateway and and I am having an unusual issue with not being able to edit documents in an internal wiki like product called confluence. The corporate VPN gateway is a Global Protect product so I am using openconnect 8.10 downloaded as source and built on my Ubuntu 18.04 system.
Prior to connecting to the VPN I have the following routing table: Kernel IP routing table Destination Gateway Genmask Flags MSS Window irtt Iface 165.204.84.11 192.168.121.1 255.255.255.255 UGH 0 0 0 enp1s0 169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 enp1s0 192.168.121.0 0.0.0.0 255.255.255.0 U 0 0 0 enp1s0 When I connect to the VPN gateway I end up with the following entries in my routing table: Kernel IP routing table Destination Gateway Genmask Flags MSS Window irtt Iface 0.0.0.0 0.0.0.0 0.0.0.0 U 0 0 0 tun0 10.176.3.1 0.0.0.0 255.255.255.255 UH 0 0 0 tun0 10.176.3.2 0.0.0.0 255.255.255.255 UH 0 0 0 tun0 13.107.64.0 0.0.0.0 255.255.192.0 U 0 0 0 tun0 13.107.208.0 0.0.0.0 255.255.255.0 U 0 0 0 tun0 13.107.219.0 0.0.0.0 255.255.255.0 U 0 0 0 tun0 13.107.246.0 0.0.0.0 255.255.255.0 U 0 0 0 tun0 13.107.253.0 0.0.0.0 255.255.255.0 U 0 0 0 tun0 52.112.0.0 0.0.0.0 255.252.0.0 U 0 0 0 tun0 52.120.0.0 0.0.0.0 255.252.0.0 U 0 0 0 tun0 68.232.34.200 0.0.0.0 255.255.255.255 UH 0 0 0 tun0 72.21.81.200 0.0.0.0 255.255.255.255 UH 0 0 0 tun0 93.184.215.201 0.0.0.0 255.255.255.255 UH 0 0 0 tun0 117.18.232.200 0.0.0.0 255.255.255.255 UH 0 0 0 tun0 152.195.19.97 0.0.0.0 255.255.255.255 UH 0 0 0 tun0 152.199.19.161 0.0.0.0 255.255.255.255 UH 0 0 0 tun0 152.199.21.175 0.0.0.0 255.255.255.255 UH 0 0 0 tun0 152.199.39.108 0.0.0.0 255.255.255.255 UH 0 0 0 tun0 152.199.52.147 0.0.0.0 255.255.255.255 UH 0 0 0 tun0 165.204.84.11 192.168.121.1 255.255.255.255 UGH 0 0 0 enp1s0 169.254.0.0 0.0.0.0 255.255.0.0 U 0 0 0 enp1s0 192.16.48.200 0.0.0.0 255.255.255.255 UH 0 0 0 tun0 192.168.121.0 0.0.0.0 255.255.255.0 U 0 0 0 enp1s0 192.229.232.200 0.0.0.0 255.255.255.255 UH 0 0 0 tun0 The openconnect invocation from the command line is: openconnect --protocol gp --script /etc/vpnc/vpnc-script atlvpn.MYCOMPANY.com -u sdn...@mycompany.com --csd-wrapper=/usr/local/src/openconnect/trojans/hipreport.sh --force-trojan 300 I had a co-worker who is also connecting to the same corporate VPN gateway with Ubuntu 20.04 and openconnect 8.05.1 (installed from Ubuntu repos) try my same vpnc-script and he ended up with a completely different routing table. When he connects he is able to edit documents in the confluence wiki just fine. His routing table looks like: Kernel IP routing table Destination Gateway Genmask Flags MSS Window irtt Iface 0.0.0.0 0.0.0.0 0.0.0.0 U 0 0 0 tun0 0.0.0.0 192.168.0.1 0.0.0.0 UG 0 0 0 ens33 10.176.3.1 0.0.0.0 255.255.255.255 UH 0 0 0 tun0 10.176.3.2 0.0.0.0 255.255.255.255 UH 0 0 0 tun0 10.254.37.215 0.0.0.0 255.255.255.255 UH 0 0 0 tun0 13.107.64.0 192.168.0.1 255.255.192.0 UG 0 0 0 ens33 13.107.208.0 192.168.0.1 255.255.255.0 UG 0 0 0 ens33 13.107.219.0 192.168.0.1 255.255.255.0 UG 0 0 0 ens33 13.107.246.0 192.168.0.1 255.255.255.0 UG 0 0 0 ens33 13.107.253.0 192.168.0.1 255.255.255.0 UG 0 0 0 ens33 52.112.0.0 192.168.0.1 255.252.0.0 UG 0 0 0 ens33 52.120.0.0 192.168.0.1 255.252.0.0 UG 0 0 0 ens33 68.232.34.200 192.168.0.1 255.255.255.255 UGH 0 0 0 ens33 72.21.81.200 192.168.0.1 255.255.255.255 UGH 0 0 0 ens33 93.184.215.201 192.168.0.1 255.255.255.255 UGH 0 0 0 ens33 117.18.232.200 192.168.0.1 255.255.255.255 UGH 0 0 0 ens33 152.195.19.97 192.168.0.1 255.255.255.255 UGH 0 0 0 ens33 152.199.19.161 192.168.0.1 255.255.255.255 UGH 0 0 0 ens33 152.199.21.175 192.168.0.1 255.255.255.255 UGH 0 0 0 ens33 152.199.39.108 192.168.0.1 255.255.255.255 UGH 0 0 0 ens33 152.199.52.147 192.168.0.1 255.255.255.255 UGH 0 0 0 ens33 165.204.84.11 192.168.0.1 255.255.255.255 UGH 0 0 0 ens33 192.16.48.200 192.168.0.1 255.255.255.255 UGH 0 0 0 ens33 192.168.0.0 0.0.0.0 255.255.255.0 U 0 0 0 ens33 192.168.0.1 0.0.0.0 255.255.255.255 UH 0 0 0 ens33 192.229.232.200 192.168.0.1 255.255.255.255 UGH 0 0 0 ens33 Why are the two routing tables so vastly different between these two Ubuntu systems? Any help or advice would be most appreciated. -- Steve _______________________________________________ openconnect-devel mailing list openconnect-devel@lists.infradead.org http://lists.infradead.org/mailman/listinfo/openconnect-devel
