Split Tunnel doesn't seem to be working

How to customize and extend your OpenVPN installation.

Moderators: TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech, TinCanTech

Post Reply
josh803316
OpenVpn Newbie
Posts: 3
Joined: Sat May 14, 2011 7:06 am

Split Tunnel doesn't seem to be working

Post by josh803316 » Sat May 14, 2011 7:10 am

I read that openvpn does split tunnel by default. I'm trying to get my split tunnel working so that only my corp traffic goes over the vpn but I'm noticing that everything is going over the vpn.

I tried using this in the config file but it didn't work (at the end of the file)

route 192.168.1.0 255.255.255.0 net_gateway

I'm testing this by using speedtest.net and looking at the closest server that is chosen, or using traceroute to go to google.

Sidenote: I'm using Tunnelblick on Mac OSX and have also tried openvpn client on Fedora in a Virtual Machine.... I'm sure this is just some simple config setting, either on the server or something I'm missing on the client but I did read in the docs that the default behavior is to use split tunnel so I'm a little stumped.

josh803316
OpenVpn Newbie
Posts: 3
Joined: Sat May 14, 2011 7:06 am

Re: Split Tunnel doesn't seem to be working

Post by josh803316 » Sat May 14, 2011 7:17 am

These are the push messages I receive

PUSH: Received control message: 'PUSH_REPLY,explicit-exit-notify,topology subnet,route-delay 5 30,dhcp-pre-release,dhcp-renew,dhcp-release,route-metric 101,ping 5,ping-restart 40,redirect-gateway def1,redirect-gateway bypass-dhcp,redirect-gateway autolocal,route-gateway x.x.x.1,dhcp-option DNS x.x.x.110,dhcp-option DNS x.x.x.80,register-dns,comp-lzo yes,ifconfig x.x.x.7 255.255.252.0

josh803316
OpenVpn Newbie
Posts: 3
Joined: Sat May 14, 2011 7:06 am

Re: Split Tunnel doesn't seem to be working

Post by josh803316 » Sat May 14, 2011 4:20 pm

Looks like this is a configurable setting on the server side in the VPN Settings area.

I just had to make sure the answer to this question was NO

Should client Internet traffic be routed through the VPN?

User avatar
janjust
Forum Team
Posts: 2703
Joined: Fri Aug 20, 2010 2:57 pm
Location: Amsterdam
Contact:

Re: Split Tunnel doesn't seem to be working

Post by janjust » Sat May 14, 2011 9:27 pm

the openvpn server is pushing

Code: Select all

redirect-gateway def1
this causes all traffic to be rerouted via the VPN; you can overrule this behaviour on the client side using

Code: Select all

route-nopull
it is then your responsibility to set up the right routes, however.

Post Reply