VPN connection not working after update to Ubuntu 22.04

[rafalnarowski]

Hi,

I've been using FortiClient VPN on Ubuntu 20.04 and have no problems. 

Last week I have installed Ubuntu 22.04 from scratch and have several issues connecting to company VPN. 

Today I've manage to connect to company VPN but no `bytes received` has to come.

Logs shows, that some routes are failed to add:
e.g. [sslvpn:DEBG] route:475 Failed add route: addr XX.X.X.X netmask 255.255.0.0 gw XX.X.XXX.X dev vpn
this command fails several times.

Could someone help me with this?

Also sometimes connecion is not established and have this error in logs: [sslvpn:DEBG] main:1457 exception: Backup routing table failed

Regards.

[sw2090]

Maybe it is AppArmor striking you?
I once had an isse with strongswan not setting the DNS servers because AppArmor didn't allow it to write to the resolve.conf.

Maybe something similar is happening here?

I don't run ssl vpn nor forticlient on ubuntu (hence the linux version still lacks any ipsec support) so I cannot verfiy nor test it.

[claudemir]

@sw2090 How did you change the permissions of the resolv.conf? Or you did disable apparmor? I want to try with forticlient.

Sure of your understanding and grateful for your contribution.

[sw2090]

I changed the AppArmor profile for strongswan to allow writing to the resolv.conf.

[SlavaS]

I found this solution in another forum, worked for me - 

(https://community.fortinet.com/t5/Fortinet-Forum/DNS-settings-on-Ubuntu-22-04-and-FortiClient-VPN-7-...)

you need to edit NM config

sudo vi /etc/NetworkManager/NetworkManager.conf

and append the following:

[keyfile]
unmanaged-devices=interface-name:vpn*,except:interface-name:enp0s3;interface-name:wlan*

then restart your service

$ sudo systemctl restart NetworkManager.service