Arch Linux

damienmarsic

Member

Registered: 2021-07-02

Posts: 21

[SOLVED] Can not connect to most websites under VPN using Strongswan

Since several weeks ago, most websites can no longer be opened when using a VPN with Strongswan. Sometimes I can access Facebook, and sometimes nothing at all.

Here are the last few lines from Strongswan when connecting to the VPN:

authentication of 'us5783.nordvpn.com' with EAP successful
IKE_SA us1[1] established between 192.168.3.4[192.168.3.4]...45.79.71.222[us5783.nordvpn.com]
scheduling reauthentication in 10237s
maximum IKE_SA lifetime 10777s
installing DNS server 103.86.96.100 via resolvconf
installing DNS server 103.86.99.100 via resolvconf
handling INTERNAL_IP4_NETMASK attribute failed
installing new virtual IP 10.6.3.75
selected proposal: ESP:AES_CBC_128/HMAC_SHA2_256_128/NO_EXT_SEQ
CHILD_SA us1{1} established with SPIs c1b08d16_i c590d296_o and TS 10.6.3.75/32 === 0.0.0.0/0
connection 'us1' established successfully

The only error message is "handling INTERNAL_IP4_NETMASK attribute failed".

Here is the output of resolvectl status:

Global
           Protocols: +LLMNR +mDNS -DNSOverTLS DNSSEC=no/unsupported
    resolv.conf mode: foreign
  Current DNS Server: 103.86.96.100
         DNS Servers: 103.86.96.100 103.86.99.100
Fallback DNS Servers: 1.1.1.1 9.9.9.10 8.8.8.8 2606:4700:4700::1111 2620:fe::10 2001:4860:4860::8888

Link 2 (enp37s0)
    Current Scopes: DNS LLMNR/IPv4 LLMNR/IPv6
         Protocols: +DefaultRoute +LLMNR -mDNS -DNSOverTLS DNSSEC=no/unsupported
Current DNS Server: 192.168.3.1
       DNS Servers: 192.168.3.1 1.1.1.1 1.0.0.1

The DNS servers shown in Global are those provided by my provider Nordvpn.

Nordvpn has been trying to help me for several weeks, and they finally gave up.

Last edited by damienmarsic (2021-08-19 06:53:02)

damienmarsic

Member

Registered: 2021-07-02

Posts: 21

Re: [SOLVED] Can not connect to most websites under VPN using Strongswan

Solution here:
https://bbs.archlinux.org/viewtopic.php?id=268813