Unfortunately I don't know. I would recommend commenting on the bug in
order to let upstream know that more people are affected by this
problem. You can try posting your reproduction instructions there, and
provide more information if upstream needs it.
I am marking this bug as Triaged, although I have not reproduced it
myself.
** Changed in: network-manager (Ubuntu)
Status: Incomplete => Triaged
** Changed in: openvpn (Ubuntu)
Status: Incomplete => Invalid
--
You received this bug notification because you are a member of Ubuntu
Touch seeded packages, which is subscribed to network-manager in Ubuntu.
https://bugs.launchpad.net/bugs/1917887
Title:
Network Manager OpenVPN nested connections fail to setup routes
correctly
Status in OpenVPN:
Unknown
Status in network-manager package in Ubuntu:
Triaged
Status in openvpn package in Ubuntu:
Invalid
Bug description:
Setup:
Host lan: 192.168.0.238/24
Host Default gw: 192.168.0.1
ip route:
default via 192.168.0.1 dev eno1 proto dhcp metric 100
169.254.0.0/16 dev eno1 scope link metric 1000
192.168.0.0/24 dev eno1 proto kernel scope link src 192.168.0.238 metric 100
Primary OpenVPN (check "Use this connection only for resources on its
network"):
server ip: public a.b.c.d
OpenVPN Tunnel: 192.168.1.0/24
routes pushed: 192.168.100.0/24
First VPN works OK:
default via 192.168.0.1 dev eno1 proto dhcp metric 100
169.254.0.0/16 dev eno1 scope link metric 1000
192.168.0.0/24 dev eno1 proto kernel scope link src 192.168.0.238 metric 100
192.168.0.1 dev eno1 proto static scope link metric 100
192.168.100.0/24 via 192.168.10.1 dev tun0 proto static metric 50
a.b.c.d via 192.168.0.1 dev eno1 proto static metric 100
Secondary OpenVPN (check "Use this connection only for resources on its
network"):
server ip: private 192.168.100.10
OpenVPN Tunnel: 192.168.20.0/24
routes pushed: 192.168.200.0/24
Second VPN Connect OK, routing table is wrong:
default via 192.168.0.1 dev eno1 proto dhcp metric 100
192.168.200.0/24 via 192.168.20.1 dev tun1
192.168.20.0/24 dev tun1 proto kernel scope link src 192.168.20.59
169.254.0.0/16 dev eno1 scope link metric 1000
192.168.0.0/24 dev eno1 proto kernel scope link src 192.168.0.238 metric 100
192.168.0.1 dev eno1 proto static scope link metric 100
192.168.100.0/24 via 192.168.10.1 dev tun0 proto static metric 50
a.b.c.d via 192.168.0.1 dev eno1 proto static metric 100
192.168.100.10 via 192.168.0.1 dev eno1 proto static metric 100 <- this is
wrong, the openVPN#2 Gateway is not on the local lan
Correct routing table using "sudo /usr/sbin/openvpn
/path/to/config.openvpn" (same a Network Manager)
default via 192.168.0.1 dev eno1 proto dhcp metric 100
192.168.200.0/24 via 192.168.20.1 dev tun1
192.168.20.0/24 dev tun1 proto kernel scope link src 192.168.20.59
169.254.0.0/16 dev eno1 scope link metric 1000
192.168.0.0/24 dev eno1 proto kernel scope link src 192.168.0.238 metric 100
192.168.0.1 dev eno1 proto static scope link metric 100
192.168.100.0/24 via 192.168.10.1 dev tun0 proto static metric 50
a.b.c.d via 192.168.0.1 dev eno1 proto static metric 100
It seems that Network Manager add a wrong additional route not added
by the openvpn bin:
192.168.100.10 via 192.168.0.1 dev eno1 proto static metric 100
ProblemType: Bug
DistroRelease: Ubuntu 20.04
Package: openvpn 2.4.7-1ubuntu2
ProcVersionSignature: Ubuntu 5.8.0-44.50~20.04.1-generic 5.8.18
Uname: Linux 5.8.0-44-generic x86_64
ApportVersion: 2.20.11-0ubuntu27.16
Architecture: amd64
CasperMD5CheckResult: skip
CurrentDesktop: ubuntu:GNOME
Date: Fri Mar 5 12:44:39 2021
InstallationDate: Installed on 2021-02-19 (13 days ago)
InstallationMedia: Ubuntu 20.04.2.0 LTS "Focal Fossa" - Release amd64
(20210209.1)
ProcEnviron:
PATH=(custom, no user)
XDG_RUNTIME_DIR=<set>
LANG=it_IT.UTF-8
SHELL=/bin/bash
SourcePackage: openvpn
UpgradeStatus: No upgrade log present (probably fresh install)
To manage notifications about this bug go to:
https://bugs.launchpad.net/openvpn/+bug/1917887/+subscriptions
--
Mailing list: https://launchpad.net/~touch-packages
Post to : [email protected]
Unsubscribe : https://launchpad.net/~touch-packages
More help : https://help.launchpad.net/ListHelp
