In the redesigned macOS app's connection screen, the "Renew session" button should disable the current VPN before attempting a session renewal.
This is because:
If the session has expired, after the client gets kicked out by the server, the VPN switch is enabled and on-demand is on, but there's no path to the internet through the VPN. At this point, clicking on "Renew session" currently results in a "Can't connect to server" error.
If the VPN uses a split tunnel configuration, it's possible that the server instance (info.json etc.) is not accessible through the tunnel.
In the redesigned macOS app's connection screen, the "Renew session" button should disable the current VPN before attempting a session renewal.
This is because: