dlenski / openconnect

OpenConnect client extended to support Palo Alto Networks' GlobalProtect VPN
679 stars 130 forks source link

DNS setup conflict with openconnect #156

Closed crossance closed 5 years ago

crossance commented 5 years ago

Not exactly an issue with openconnect itself but a very annoying setup issue I don't see mentioned anywhere.

Problem description

  1. I ran openconnect-gp as follows: `sudo openconnect --protocol=gp --csd-wrapper=hipreport.sh vpn-address.domain.com
  2. VPN connected fine but I could not access/ping any company sites

At this point, I found several other threads discussing that they face similar issue where their VPN connected fine but still do not have access. I tried adding --no-dtls, changing up --usergroup parameters but to no avail. After hours of struggling, I realised that the issue may have been caused by my Google DNS setup. I removed nameserver 8.8.8.8/8.8.4.4 from the resolv.conf, lo and behold and everything is working perfectly!

Google/Cloudflare is super common in my region where countries block websites. It is also something I feel is super easy to miss and I thought that it might be helpful to add it in the troubleshooting/setup section, especially for someone like me who aren't exactly well versed with networking/Linux.