Re: Looking for pointers debugging missing X-CSTP-Split-Exclude in Fedora 32

2020-11-16 Thread Rob Sherwood
Thanks for the fast and complete reply! I've jumped in on the NetworkManager thread that you linked - let me see if I can make some progress there. If nothing else, it helps me stop barking up the wrong tree :-/ Thank you! - Rob . On Mon, Nov 16, 2020 at 5:22 PM Daniel Lenski wrote: > > You'

Re: Looking for pointers debugging missing X-CSTP-Split-Exclude in Fedora 32

2020-11-16 Thread Daniel Lenski
You've done a pretty impressive deep-dive here. The short summary, unfortunately, is that NetworkManager itself simply does not support split-exclude routes. Any split-exclude routes provided by the server are ignored by NM-OpenConnect: https://gitlab.freedesktop.org/NetworkManager/NetworkManager/

Re: Looking for pointers debugging missing X-CSTP-Split-Exclude in Fedora 32

2020-11-16 Thread Rob Sherwood
Hi, I'm running an openconnect client (versions below) that connects perfectly to a VPN server which advertises a bunch of split exclude routes using X-CSTP-Split-Exclude. While the connection, the auth, and the actual VPN bits all work correctly, unfortunately, those extra routes are not showing