Hi,
On Thu, Jul 27, 2017 at 2:01 PM, Karl Mueller <ewi...@gmail.com> wrote:
>
> I think it is due to the redirect-gateway, and def1 does not change the
> behavior. I believe it’s because Windows sends NCSI internet probes to
> determine if an adapter has “Internet” access. If you’re not redirecting
> your gateway, those probes will probably fail via the VPN interface so it
> won’t consider the VPN interface as a viable alternative.
>
If so just redirecting msftncsi.com through VPN will trigger this?
>
> A frustrating part of the problem is that Windows overrides the routing
> table by *silently* directing new connections to the “better” Ethernet
> interface (in anticipation of the WiFi losing signal altogether, I
> suppose). The only way to observe this is to use the powershell command
> ‘find-netroute -remote <ip>’ which tells you where Windows will *really*
> send the packet. Also the effect of the redirection isn’t immediate,
> Windows waits from 30-120 seconds to start redirecting traffic to the VPN
> interface once it detects weak WiFi signal.
>
So to reproduce this the wifi signal has to go weak as well?
>
> Some more details of my setup: I use the Windows service-based VPN
> connection rather than user-initiated by way of openvpnserv2.exe. We are
> using build 1511 of Windows 10. I posted my configs here:
> https://forums.openvpn.net/viewtopic.php?f=4&t=24499
I suppose you mean the opposite: that is the connection is started at boot
using OpenVPNService (i.e., openvpnserv2.exe). User initiated connections
(using the GUI) are started by OpenVPNServiceInteractive (i.e.,
openvpnserv.exe).
Will try to reproduce, but being affected only when auto-started at boot is
puzzling. In both cases the routes are set up the same way so it should not
matter. Except for --redirect-gateway: the interactive service will force
the use of def1, but again your config specifies def1 so the behaviour
should be the same.
Selva
------------------------------------------------------------------------------
Check out the vibrant tech community on one of the world's most
engaging tech sites, Slashdot.org! http://sdm.link/slashdot
_______________________________________________
Openvpn-devel mailing list
Openvpn-devel@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/openvpn-devel
