Public bug reported:

Setup:
Host lan: 192.168.0.238/24
Host Default gw: 192.168.0.1

ip route:
default via 192.168.0.1 dev eno1 proto dhcp metric 100 
169.254.0.0/16 dev eno1 scope link metric 1000 
192.168.0.0/24 dev eno1 proto kernel scope link src 192.168.0.238 metric 100 


Primary OpenVPN (check "Use this connection only for resources on its network"):
server ip: public a.b.c.d
OpenVPN Tunnel: 192.168.1.0/24
routes pushed: 192.168.100.0/24

First VPN works OK:
default via 192.168.0.1 dev eno1 proto dhcp metric 100 
169.254.0.0/16 dev eno1 scope link metric 1000 
192.168.0.0/24 dev eno1 proto kernel scope link src 192.168.0.238 metric 100 
192.168.0.1 dev eno1 proto static scope link metric 100 
192.168.100.0/24 via 192.168.10.1 dev tun0 proto static metric 50 
a.b.c.d via 192.168.0.1 dev eno1 proto static metric 100 


Secondary OpenVPN  (check "Use this connection only for resources on its 
network"):
server ip: private 192.168.100.10 
OpenVPN Tunnel: 192.168.20.0/24
routes pushed: 192.168.200.0/24

Second VPN Connect OK, routing table is wrong:
default via 192.168.0.1 dev eno1 proto dhcp metric 100 
192.168.200.0/24 via 192.168.20.1 dev tun1 
192.168.20.0/24 dev tun1 proto kernel scope link src 192.168.20.59 
169.254.0.0/16 dev eno1 scope link metric 1000 
192.168.0.0/24 dev eno1 proto kernel scope link src 192.168.0.238 metric 100 
192.168.0.1 dev eno1 proto static scope link metric 100 
192.168.100.0/24 via 192.168.10.1 dev tun0 proto static metric 50 
a.b.c.d via 192.168.0.1 dev eno1 proto static metric 100 
192.168.100.10 via 192.168.0.1 dev eno1 proto static metric 100 <- this is 
wrong, the openVPN#2 Gateway is not on the local lan

Correct routing table using "sudo /usr/sbin/openvpn
/path/to/config.openvpn" (same a Network Manager)

default via 192.168.0.1 dev eno1 proto dhcp metric 100 
192.168.200.0/24 via 192.168.20.1 dev tun1 
192.168.20.0/24 dev tun1 proto kernel scope link src 192.168.20.59 
169.254.0.0/16 dev eno1 scope link metric 1000 
192.168.0.0/24 dev eno1 proto kernel scope link src 192.168.0.238 metric 100 
192.168.0.1 dev eno1 proto static scope link metric 100 
192.168.100.0/24 via 192.168.10.1 dev tun0 proto static metric 50 
a.b.c.d via 192.168.0.1 dev eno1 proto static metric 100 

It seems that Network Manager add a wrong additional route not added by
the openvpn bin:

192.168.100.10 via 192.168.0.1 dev eno1 proto static metric 100

ProblemType: Bug
DistroRelease: Ubuntu 20.04
Package: openvpn 2.4.7-1ubuntu2
ProcVersionSignature: Ubuntu 5.8.0-44.50~20.04.1-generic 5.8.18
Uname: Linux 5.8.0-44-generic x86_64
ApportVersion: 2.20.11-0ubuntu27.16
Architecture: amd64
CasperMD5CheckResult: skip
CurrentDesktop: ubuntu:GNOME
Date: Fri Mar  5 12:44:39 2021
InstallationDate: Installed on 2021-02-19 (13 days ago)
InstallationMedia: Ubuntu 20.04.2.0 LTS "Focal Fossa" - Release amd64 
(20210209.1)
ProcEnviron:
 PATH=(custom, no user)
 XDG_RUNTIME_DIR=<set>
 LANG=it_IT.UTF-8
 SHELL=/bin/bash
SourcePackage: openvpn
UpgradeStatus: No upgrade log present (probably fresh install)

** Affects: openvpn (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: amd64 apport-bug focal

** Summary changed:

- Network Manager OpenVPN nested connection fail to setup routes correctly
+ Network Manager OpenVPN nested connections fail to setup routes correctly

-- 
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/1917887

Title:
  Network Manager OpenVPN nested connections fail to setup routes
  correctly

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/openvpn/+bug/1917887/+subscriptions

-- 
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs

Reply via email to