10
9
Fork
You've already forked linux-app
14

Cannot resolve chalmers.se domains when connected with EduVPN on Kubuntu 25.10 #681

Closed
opened 2026年02月06日 17:34:12 +01:00 by carlsven · 8 comments

Installation

Following these docs:
https://docs.eduvpn.org/client/linux/installation.html#ubuntu-2510

Version

eduVPN CLI version: 4.6.0 with eduvpn-common version: 4.0.0

Check if your issue is in the known issues list

The known issues list is available here: https://docs.eduvpn.org/client/linux/support.html#known-issues

OS/Distribution

What operating system/distribution and version you are running?
Kubuntu 25.10 Questing Quokka (Ubuntu 25.10 Questing Quokka)

Logs

Do you have a problem while adding before connecting?

No

Do you have a problem during or after connecting?

I can connect to the EduVPN Chalmers server no problems. The issue is that I cannot reach or ping chalmers.se or any subdomain.

From the console:

carl@CarlXPS:~$ eduvpn-cli connect -n 1
time=2026年02月06日T17:25:14.295+01:00 level=DEBUG msg="Client registered" name=org.eduvpn.app.linux version=4.6.0 directory=/home/carl/.config/eduvpn
time=2026年02月06日T17:25:14.304+01:00 level=DEBUG msg="client wants to get a VPN config" server_id=https://lcvpn.chalmers.se/ server_type=1 prefer_tcp=false startup=false
time=2026年02月06日T17:25:14.304+01:00 level=DEBUG msg="FSM transition" old=Main new=GettingConfig
time=2026年02月06日T17:25:14.325+01:00 level=DEBUG msg="sending request" method=GET url=https://disco.eduvpn.org/v2/server_list.json
time=2026年02月06日T17:25:14.411+01:00 level=DEBUG msg="got HTTP 304 for discovery, server_list.json is not modified"
time=2026年02月06日T17:25:14.417+01:00 level=DEBUG msg="sending request" method=GET url=https://lcvpn.chalmers.se/.well-known/vpn-user-portal
time=2026年02月06日T17:25:14.431+01:00 level=DEBUG msg="sending request" method=GET url=https://lcvpn.chalmers.se/vpn-user-portal/api/v3/info
time=2026年02月06日T17:25:14.437+01:00 level=DEBUG msg="sending request" method=POST url=https://lcvpn.chalmers.se/vpn-user-portal/api/v3/connect
time=2026年02月06日T17:25:14.471+01:00 level=DEBUG msg="FSM transition" old=GettingConfig new=GotConfig
time=2026年02月06日T17:25:14.472+01:00 level=DEBUG msg="FSM transition" old=GotConfig new=Connecting
time=2026年02月06日T17:25:14.855+01:00 level=DEBUG msg="FSM transition" old=Connecting new=Connected
time=2026年02月06日T17:25:14.858+01:00 level=DEBUG msg="FSM transition" old=Connected new=Deregistered
carl@CarlXPS:~$ ping -c 3 google.se
PING google.se (172.217.19.227) 56(84) bytes of data.
64 bytes from par21s11-in-f3.1e100.net (172.217.19.227): icmp_seq=1 ttl=110 time=13.8 ms
64 bytes from par21s11-in-f3.1e100.net (172.217.19.227): icmp_seq=2 ttl=110 time=15.4 ms
64 bytes from par21s11-in-f3.1e100.net (172.217.19.227): icmp_seq=3 ttl=110 time=15.4 ms
--- google.se ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 2004ms
rtt min/avg/max/mdev = 13.791/14.851/15.396/0.749 ms
carl@CarlXPS:~$ ping -c 3 chalmers.se
PING chalmers.se (2001:6b0:2:2009::611) 56 data bytes
--- chalmers.se ping statistics ---
3 packets transmitted, 0 received, 100% packet loss, time 2053ms

From NetworkManager:

feb 06 17:25:14 CarlXPS NetworkManager[1119]: <info> [1770395114.7850] manager: (eduVPN): new WireGuard device (/org/freedesktop/NetworkManager/Devices/8)
feb 06 17:25:14 CarlXPS NetworkManager[1119]: <info> [1770395114.7851] audit: op="connection-add" uuid="73c688d6-6108-4924-800b-ff4e0ea92853" name="eduVPN" pid=8749 uid=1000 result="success"
feb 06 17:25:14 CarlXPS NetworkManager[1119]: <info> [1770395114.7894] device (eduVPN): state change: unmanaged -> unavailable (reason 'managed', managed-type: 'external')
feb 06 17:25:14 CarlXPS NetworkManager[1119]: <info> [1770395114.7901] device (eduVPN): state change: unavailable -> disconnected (reason 'user-requested', managed-type: 'full')
feb 06 17:25:14 CarlXPS NetworkManager[1119]: <info> [1770395114.7904] device (eduVPN): Activation: starting connection 'eduVPN' (73c688d6-6108-4924-800b-ff4e0ea92853)
feb 06 17:25:14 CarlXPS NetworkManager[1119]: <info> [1770395114.7904] audit: op="connection-activate" uuid="73c688d6-6108-4924-800b-ff4e0ea92853" name="eduVPN" pid=8749 uid=1000 result="success"
feb 06 17:25:14 CarlXPS NetworkManager[1119]: <info> [1770395114.7905] device (eduVPN): state change: disconnected -> prepare (reason 'none', managed-type: 'full')
feb 06 17:25:14 CarlXPS NetworkManager[1119]: <info> [1770395114.7906] device (eduVPN): state change: prepare -> config (reason 'none', managed-type: 'full')
feb 06 17:25:14 CarlXPS NetworkManager[1119]: <info> [1770395114.7908] device (eduVPN): state change: config -> need-auth (reason 'none', managed-type: 'full')
feb 06 17:25:14 CarlXPS NetworkManager[1119]: <info> [1770395114.7912] device (eduVPN): state change: need-auth -> prepare (reason 'none', managed-type: 'full')
feb 06 17:25:14 CarlXPS NetworkManager[1119]: <info> [1770395114.7913] device (eduVPN): state change: prepare -> config (reason 'none', managed-type: 'full')
feb 06 17:25:14 CarlXPS NetworkManager[1119]: <info> [1770395114.8306] device (eduVPN): state change: config -> ip-config (reason 'none', managed-type: 'full')
feb 06 17:25:14 CarlXPS NetworkManager[1119]: <info> [1770395114.8344] device (eduVPN): state change: ip-config -> ip-check (reason 'none', managed-type: 'full')
feb 06 17:25:14 CarlXPS NetworkManager[1119]: <info> [1770395114.8545] device (eduVPN): state change: ip-check -> secondaries (reason 'none', managed-type: 'full')
feb 06 17:25:14 CarlXPS NetworkManager[1119]: <info> [1770395114.8546] device (eduVPN): state change: secondaries -> activated (reason 'none', managed-type: 'full')
feb 06 17:25:14 CarlXPS NetworkManager[1119]: <info> [1770395114.8548] device (eduVPN): Activation: successful, device activated.

From eduvpn logs in .config:

time=2026年02月06日T17:25:14.295+01:00 level=DEBUG msg="Client registered" name=org.eduvpn.app.linux version=4.6.0 directory=/home/carl/.config/eduvpn
time=2026年02月06日T17:25:14.304+01:00 level=DEBUG msg="client wants to get a VPN config" server_id=https://lcvpn.chalmers.se/ server_type=1 prefer_tcp=false startup=false
time=2026年02月06日T17:25:14.304+01:00 level=DEBUG msg="FSM transition" old=Main new=GettingConfig
time=2026年02月06日T17:25:14.325+01:00 level=DEBUG msg="sending request" method=GET url=https://disco.eduvpn.org/v2/server_list.json
time=2026年02月06日T17:25:14.411+01:00 level=DEBUG msg="got HTTP 304 for discovery, server_list.json is not modified"
time=2026年02月06日T17:25:14.417+01:00 level=DEBUG msg="sending request" method=GET url=https://lcvpn.chalmers.se/.well-known/vpn-user-portal
time=2026年02月06日T17:25:14.431+01:00 level=DEBUG msg="sending request" method=GET url=https://lcvpn.chalmers.se/vpn-user-portal/api/v3/info
time=2026年02月06日T17:25:14.437+01:00 level=DEBUG msg="sending request" method=POST url=https://lcvpn.chalmers.se/vpn-user-portal/api/v3/connect
time=2026年02月06日T17:25:14.471+01:00 level=DEBUG msg="FSM transition" old=GettingConfig new=GotConfig
time=2026年02月06日T17:25:14.472+01:00 level=DEBUG msg="FSM transition" old=GotConfig new=Connecting
time=2026年02月06日T17:25:14.855+01:00 level=DEBUG msg="FSM transition" old=Connecting new=Connected
time=2026年02月06日T17:25:14.858+01:00 level=DEBUG msg="FSM transition" old=Connected new=Deregistered

From nmcli con show eduVPN:

connection.id: eduVPN
connection.uuid: 73c688d6-6108-4924-800b-ff4e0ea92853
connection.stable-id: --
connection.type: wireguard
connection.interface-name: eduVPN
connection.autoconnect: no
connection.autoconnect-priority: 0
connection.autoconnect-retries: -1 (default)
connection.multi-connect: 0 (default)
connection.auth-retries: -1
connection.timestamp: 1770395114
connection.permissions: user:carl
connection.zone: --
connection.controller: --
connection.master: --
connection.slave-type: --
connection.port-type: --
connection.autoconnect-slaves: -1 (default)
connection.autoconnect-ports: -1 (default)
connection.down-on-poweroff: -1 (default)
connection.secondaries: --
connection.gateway-ping-timeout: 0
connection.ip-ping-timeout: 0
connection.ip-ping-addresses: --
connection.ip-ping-addresses-require-all:-1 (default)
connection.metered: unknown
connection.lldp: default
connection.mdns: -1 (default)
connection.llmnr: -1 (default)
connection.dns-over-tls: -1 (default)
connection.mptcp-flags: 0x0 (default)
connection.wait-device-timeout: -1
connection.wait-activation-delay: -1
ipv4.method: manual
ipv4.dns: 129.16.1.53,129.16.2.53
ipv4.dns-search: chalmers.se
ipv4.dns-options: --
ipv4.dns-priority: 0
ipv4.addresses: 172.29.3.139/17
ipv4.gateway: --
ipv4.routes: --
ipv4.route-metric: -1
ipv4.route-table: 51860
ipv4.routing-rules: priority 3 not from 0.0.0.0/0 fwmark 0xca94 table 51860, priority 1 to 172.29.3.139/17 suppress_prefixlength 0 table 51860, priority 2 to 10.0.0.0/8 suppress_prefixlength 0 table 254, priority 2 to 172.16.0.0/12 suppress_prefixlength 0 table 254, priority 2 to 192.168.0.0/16>
ipv4.replace-local-rule: -1 (default)
ipv4.dhcp-send-release: -1 (default)
ipv4.routed-dns: -1 (default)
ipv4.ignore-auto-routes: no
ipv4.ignore-auto-dns: no
ipv4.dhcp-client-id: --
ipv4.dhcp-iaid: --
ipv4.dhcp-dscp: --
ipv4.dhcp-timeout: 0 (default)
ipv4.dhcp-send-hostname-deprecated: yes
ipv4.dhcp-send-hostname: -1 (default)
ipv4.dhcp-hostname: --
ipv4.dhcp-fqdn: --
ipv4.dhcp-hostname-flags: 0x0 (none)
ipv4.never-default: yes
ipv4.may-fail: yes
ipv4.required-timeout: -1 (default)
ipv4.dad-timeout: -1 (default)
ipv4.dhcp-vendor-class-identifier: --
ipv4.dhcp-ipv6-only-preferred: -1 (default)
ipv4.link-local: 0 (default)
ipv4.dhcp-reject-servers: --
ipv4.auto-route-ext-gw: -1 (default)
ipv4.shared-dhcp-range: --
ipv4.shared-dhcp-lease-time: 0 (default)
ipv6.method: manual
ipv6.dns: 2001:6b0:2:1::53,2001:6b0:2:2::53
ipv6.dns-search: chalmers.se
ipv6.dns-options: --
ipv6.dns-priority: 0
ipv6.addresses: 2001:6b0:2:201d::38b/64
ipv6.gateway: --
ipv6.routes: --
ipv6.route-metric: -1
ipv6.route-table: 51860
ipv6.routing-rules: priority 3 not from ::/0 fwmark 0xca94 table 51860, priority 2 to fc00::/7 suppress_prefixlength 0 table 254
ipv6.replace-local-rule: -1 (default)
ipv6.dhcp-send-release: -1 (default)
ipv6.routed-dns: -1 (default)
ipv6.ignore-auto-routes: no
ipv6.ignore-auto-dns: no
ipv6.never-default: yes
ipv6.may-fail: yes
ipv6.required-timeout: -1 (default)
ipv6.ip6-privacy: -1 (default)
ipv6.temp-valid-lifetime: 0 (default)
ipv6.temp-preferred-lifetime: 0 (default)
ipv6.addr-gen-mode: default
ipv6.ra-timeout: 0 (default)
ipv6.mtu: auto
ipv6.dhcp-pd-hint: --
ipv6.dhcp-duid: --
ipv6.dhcp-iaid: --
ipv6.dhcp-timeout: 0 (default)
ipv6.dhcp-send-hostname-deprecated: yes
ipv6.dhcp-send-hostname: -1 (default)
ipv6.dhcp-hostname: --
ipv6.dhcp-hostname-flags: 0x0 (none)
ipv6.auto-route-ext-gw: -1 (default)
ipv6.token: --
wireguard.private-key: <hidden>
wireguard.private-key-flags: 0 (none)
wireguard.listen-port: 0
wireguard.fwmark: 0xca94
wireguard.peer-routes: yes
wireguard.mtu: 0
wireguard.ip4-auto-default-route: 0 (false)
wireguard.ip6-auto-default-route: 0 (false)
proxy.method: none
proxy.browser-only: no
proxy.pac-url: --
proxy.pac-script: --
GENERAL.NAME: eduVPN
GENERAL.UUID: 73c688d6-6108-4924-800b-ff4e0ea92853
GENERAL.DEVICES: eduVPN
GENERAL.IP-IFACE: eduVPN
GENERAL.STATE: activated
GENERAL.DEFAULT: no
GENERAL.DEFAULT6: no
GENERAL.SPEC-OBJECT: --
GENERAL.VPN: no
GENERAL.DBUS-PATH: /org/freedesktop/NetworkManager/ActiveConnection/6
GENERAL.CON-PATH: /org/freedesktop/NetworkManager/Settings/10
GENERAL.ZONE: --
GENERAL.MASTER-PATH: --
IP4.ADDRESS[1]: 172.29.3.139/17
IP4.GATEWAY: --
IP4.ROUTE[1]: dst = 10.16.3.0/24, nh = 0.0.0.0, mt = 50, table=51860
IP4.ROUTE[2]: dst = 16.16.18.104/32, nh = 0.0.0.0, mt = 50, table=51860
IP4.ROUTE[3]: dst = 89.44.250.74/32, nh = 0.0.0.0, mt = 50, table=51860
IP4.ROUTE[4]: dst = 129.16.0.0/18, nh = 0.0.0.0, mt = 50, table=51860
IP4.ROUTE[5]: dst = 129.16.64.0/22, nh = 0.0.0.0, mt = 50, table=51860
IP4.ROUTE[6]: dst = 129.16.68.0/24, nh = 0.0.0.0, mt = 50, table=51860
IP4.ROUTE[7]: dst = 129.16.69.0/27, nh = 0.0.0.0, mt = 50, table=51860
IP4.ROUTE[8]: dst = 129.16.69.32/32, nh = 0.0.0.0, mt = 50, table=51860
IP4.ROUTE[9]: dst = 129.16.69.34/31, nh = 0.0.0.0, mt = 50, table=51860
IP4.ROUTE[10]: dst = 129.16.69.36/30, nh = 0.0.0.0, mt = 50, table=51860
IP4.ROUTE[11]: dst = 129.16.69.40/29, nh = 0.0.0.0, mt = 50, table=51860
IP4.ROUTE[12]: dst = 129.16.69.48/28, nh = 0.0.0.0, mt = 50, table=51860
IP4.ROUTE[13]: dst = 129.16.69.64/26, nh = 0.0.0.0, mt = 50, table=51860
IP4.ROUTE[14]: dst = 129.16.69.128/25, nh = 0.0.0.0, mt = 50, table=51860
IP4.ROUTE[15]: dst = 129.16.70.0/23, nh = 0.0.0.0, mt = 50, table=51860
IP4.ROUTE[16]: dst = 129.16.72.0/21, nh = 0.0.0.0, mt = 50, table=51860
IP4.ROUTE[17]: dst = 129.16.80.0/20, nh = 0.0.0.0, mt = 50, table=51860
IP4.ROUTE[18]: dst = 129.16.96.0/19, nh = 0.0.0.0, mt = 50, table=51860
IP4.ROUTE[19]: dst = 129.16.128.0/17, nh = 0.0.0.0, mt = 50, table=51860
IP4.ROUTE[20]: dst = 172.29.0.0/17, nh = 0.0.0.0, mt = 50, table=51860
IP4.ROUTE[21]: dst = 188.95.227.78/32, nh = 0.0.0.0, mt = 50, table=51860
IP4.ROUTE[22]: dst = 192.71.193.166/32, nh = 0.0.0.0, mt = 50, table=51860
IP4.ROUTE[23]: dst = 172.29.0.0/17, nh = 0.0.0.0, mt = 50, table=51860
IP4.DNS[1]: 129.16.1.53
IP4.DNS[2]: 129.16.2.53
IP4.SEARCHES[1]: chalmers.se
IP6.ADDRESS[1]: fe80::ee6b:982e:4b43:c679/64
IP6.ADDRESS[2]: 2001:6b0:2:201d::38b/64
IP6.GATEWAY: --
IP6.ROUTE[1]: dst = 2001:6b0:2::/48, nh = ::, mt = 50, table=51860
IP6.ROUTE[2]: dst = 2001:6b0:2:201d::/64, nh = ::, mt = 50, table=51860
IP6.ROUTE[3]: dst = fe80::/64, nh = ::, mt = 1024, table=51860
IP6.DNS[1]: 2001:6b0:2:1::53
IP6.DNS[2]: 2001:6b0:2:2::53
IP6.SEARCHES[1]: chalmers.se
# Installation Following these docs: https://docs.eduvpn.org/client/linux/installation.html#ubuntu-2510 # Version eduVPN CLI version: 4.6.0 with eduvpn-common version: 4.0.0 # Check if your issue is in the known issues list The known issues list is available here: <https://docs.eduvpn.org/client/linux/support.html#known-issues> # OS/Distribution What operating system/distribution and version you are running? Kubuntu 25.10 Questing Quokka (Ubuntu 25.10 Questing Quokka) # Logs ## Do you have a problem while adding before connecting? No ## Do you have a problem during or after connecting? I can connect to the EduVPN Chalmers server no problems. The issue is that I cannot reach or ping chalmers.se or any subdomain. From the console: ``` carl@CarlXPS:~$ eduvpn-cli connect -n 1 time=2026年02月06日T17:25:14.295+01:00 level=DEBUG msg="Client registered" name=org.eduvpn.app.linux version=4.6.0 directory=/home/carl/.config/eduvpn time=2026年02月06日T17:25:14.304+01:00 level=DEBUG msg="client wants to get a VPN config" server_id=https://lcvpn.chalmers.se/ server_type=1 prefer_tcp=false startup=false time=2026年02月06日T17:25:14.304+01:00 level=DEBUG msg="FSM transition" old=Main new=GettingConfig time=2026年02月06日T17:25:14.325+01:00 level=DEBUG msg="sending request" method=GET url=https://disco.eduvpn.org/v2/server_list.json time=2026年02月06日T17:25:14.411+01:00 level=DEBUG msg="got HTTP 304 for discovery, server_list.json is not modified" time=2026年02月06日T17:25:14.417+01:00 level=DEBUG msg="sending request" method=GET url=https://lcvpn.chalmers.se/.well-known/vpn-user-portal time=2026年02月06日T17:25:14.431+01:00 level=DEBUG msg="sending request" method=GET url=https://lcvpn.chalmers.se/vpn-user-portal/api/v3/info time=2026年02月06日T17:25:14.437+01:00 level=DEBUG msg="sending request" method=POST url=https://lcvpn.chalmers.se/vpn-user-portal/api/v3/connect time=2026年02月06日T17:25:14.471+01:00 level=DEBUG msg="FSM transition" old=GettingConfig new=GotConfig time=2026年02月06日T17:25:14.472+01:00 level=DEBUG msg="FSM transition" old=GotConfig new=Connecting time=2026年02月06日T17:25:14.855+01:00 level=DEBUG msg="FSM transition" old=Connecting new=Connected time=2026年02月06日T17:25:14.858+01:00 level=DEBUG msg="FSM transition" old=Connected new=Deregistered carl@CarlXPS:~$ ping -c 3 google.se PING google.se (172.217.19.227) 56(84) bytes of data. 64 bytes from par21s11-in-f3.1e100.net (172.217.19.227): icmp_seq=1 ttl=110 time=13.8 ms 64 bytes from par21s11-in-f3.1e100.net (172.217.19.227): icmp_seq=2 ttl=110 time=15.4 ms 64 bytes from par21s11-in-f3.1e100.net (172.217.19.227): icmp_seq=3 ttl=110 time=15.4 ms --- google.se ping statistics --- 3 packets transmitted, 3 received, 0% packet loss, time 2004ms rtt min/avg/max/mdev = 13.791/14.851/15.396/0.749 ms carl@CarlXPS:~$ ping -c 3 chalmers.se PING chalmers.se (2001:6b0:2:2009::611) 56 data bytes --- chalmers.se ping statistics --- 3 packets transmitted, 0 received, 100% packet loss, time 2053ms ``` From NetworkManager: ``` feb 06 17:25:14 CarlXPS NetworkManager[1119]: <info> [1770395114.7850] manager: (eduVPN): new WireGuard device (/org/freedesktop/NetworkManager/Devices/8) feb 06 17:25:14 CarlXPS NetworkManager[1119]: <info> [1770395114.7851] audit: op="connection-add" uuid="73c688d6-6108-4924-800b-ff4e0ea92853" name="eduVPN" pid=8749 uid=1000 result="success" feb 06 17:25:14 CarlXPS NetworkManager[1119]: <info> [1770395114.7894] device (eduVPN): state change: unmanaged -> unavailable (reason 'managed', managed-type: 'external') feb 06 17:25:14 CarlXPS NetworkManager[1119]: <info> [1770395114.7901] device (eduVPN): state change: unavailable -> disconnected (reason 'user-requested', managed-type: 'full') feb 06 17:25:14 CarlXPS NetworkManager[1119]: <info> [1770395114.7904] device (eduVPN): Activation: starting connection 'eduVPN' (73c688d6-6108-4924-800b-ff4e0ea92853) feb 06 17:25:14 CarlXPS NetworkManager[1119]: <info> [1770395114.7904] audit: op="connection-activate" uuid="73c688d6-6108-4924-800b-ff4e0ea92853" name="eduVPN" pid=8749 uid=1000 result="success" feb 06 17:25:14 CarlXPS NetworkManager[1119]: <info> [1770395114.7905] device (eduVPN): state change: disconnected -> prepare (reason 'none', managed-type: 'full') feb 06 17:25:14 CarlXPS NetworkManager[1119]: <info> [1770395114.7906] device (eduVPN): state change: prepare -> config (reason 'none', managed-type: 'full') feb 06 17:25:14 CarlXPS NetworkManager[1119]: <info> [1770395114.7908] device (eduVPN): state change: config -> need-auth (reason 'none', managed-type: 'full') feb 06 17:25:14 CarlXPS NetworkManager[1119]: <info> [1770395114.7912] device (eduVPN): state change: need-auth -> prepare (reason 'none', managed-type: 'full') feb 06 17:25:14 CarlXPS NetworkManager[1119]: <info> [1770395114.7913] device (eduVPN): state change: prepare -> config (reason 'none', managed-type: 'full') feb 06 17:25:14 CarlXPS NetworkManager[1119]: <info> [1770395114.8306] device (eduVPN): state change: config -> ip-config (reason 'none', managed-type: 'full') feb 06 17:25:14 CarlXPS NetworkManager[1119]: <info> [1770395114.8344] device (eduVPN): state change: ip-config -> ip-check (reason 'none', managed-type: 'full') feb 06 17:25:14 CarlXPS NetworkManager[1119]: <info> [1770395114.8545] device (eduVPN): state change: ip-check -> secondaries (reason 'none', managed-type: 'full') feb 06 17:25:14 CarlXPS NetworkManager[1119]: <info> [1770395114.8546] device (eduVPN): state change: secondaries -> activated (reason 'none', managed-type: 'full') feb 06 17:25:14 CarlXPS NetworkManager[1119]: <info> [1770395114.8548] device (eduVPN): Activation: successful, device activated. ``` From eduvpn logs in .config: ``` time=2026年02月06日T17:25:14.295+01:00 level=DEBUG msg="Client registered" name=org.eduvpn.app.linux version=4.6.0 directory=/home/carl/.config/eduvpn time=2026年02月06日T17:25:14.304+01:00 level=DEBUG msg="client wants to get a VPN config" server_id=https://lcvpn.chalmers.se/ server_type=1 prefer_tcp=false startup=false time=2026年02月06日T17:25:14.304+01:00 level=DEBUG msg="FSM transition" old=Main new=GettingConfig time=2026年02月06日T17:25:14.325+01:00 level=DEBUG msg="sending request" method=GET url=https://disco.eduvpn.org/v2/server_list.json time=2026年02月06日T17:25:14.411+01:00 level=DEBUG msg="got HTTP 304 for discovery, server_list.json is not modified" time=2026年02月06日T17:25:14.417+01:00 level=DEBUG msg="sending request" method=GET url=https://lcvpn.chalmers.se/.well-known/vpn-user-portal time=2026年02月06日T17:25:14.431+01:00 level=DEBUG msg="sending request" method=GET url=https://lcvpn.chalmers.se/vpn-user-portal/api/v3/info time=2026年02月06日T17:25:14.437+01:00 level=DEBUG msg="sending request" method=POST url=https://lcvpn.chalmers.se/vpn-user-portal/api/v3/connect time=2026年02月06日T17:25:14.471+01:00 level=DEBUG msg="FSM transition" old=GettingConfig new=GotConfig time=2026年02月06日T17:25:14.472+01:00 level=DEBUG msg="FSM transition" old=GotConfig new=Connecting time=2026年02月06日T17:25:14.855+01:00 level=DEBUG msg="FSM transition" old=Connecting new=Connected time=2026年02月06日T17:25:14.858+01:00 level=DEBUG msg="FSM transition" old=Connected new=Deregistered ``` From nmcli con show eduVPN: ``` connection.id: eduVPN connection.uuid: 73c688d6-6108-4924-800b-ff4e0ea92853 connection.stable-id: -- connection.type: wireguard connection.interface-name: eduVPN connection.autoconnect: no connection.autoconnect-priority: 0 connection.autoconnect-retries: -1 (default) connection.multi-connect: 0 (default) connection.auth-retries: -1 connection.timestamp: 1770395114 connection.permissions: user:carl connection.zone: -- connection.controller: -- connection.master: -- connection.slave-type: -- connection.port-type: -- connection.autoconnect-slaves: -1 (default) connection.autoconnect-ports: -1 (default) connection.down-on-poweroff: -1 (default) connection.secondaries: -- connection.gateway-ping-timeout: 0 connection.ip-ping-timeout: 0 connection.ip-ping-addresses: -- connection.ip-ping-addresses-require-all:-1 (default) connection.metered: unknown connection.lldp: default connection.mdns: -1 (default) connection.llmnr: -1 (default) connection.dns-over-tls: -1 (default) connection.mptcp-flags: 0x0 (default) connection.wait-device-timeout: -1 connection.wait-activation-delay: -1 ipv4.method: manual ipv4.dns: 129.16.1.53,129.16.2.53 ipv4.dns-search: chalmers.se ipv4.dns-options: -- ipv4.dns-priority: 0 ipv4.addresses: 172.29.3.139/17 ipv4.gateway: -- ipv4.routes: -- ipv4.route-metric: -1 ipv4.route-table: 51860 ipv4.routing-rules: priority 3 not from 0.0.0.0/0 fwmark 0xca94 table 51860, priority 1 to 172.29.3.139/17 suppress_prefixlength 0 table 51860, priority 2 to 10.0.0.0/8 suppress_prefixlength 0 table 254, priority 2 to 172.16.0.0/12 suppress_prefixlength 0 table 254, priority 2 to 192.168.0.0/16> ipv4.replace-local-rule: -1 (default) ipv4.dhcp-send-release: -1 (default) ipv4.routed-dns: -1 (default) ipv4.ignore-auto-routes: no ipv4.ignore-auto-dns: no ipv4.dhcp-client-id: -- ipv4.dhcp-iaid: -- ipv4.dhcp-dscp: -- ipv4.dhcp-timeout: 0 (default) ipv4.dhcp-send-hostname-deprecated: yes ipv4.dhcp-send-hostname: -1 (default) ipv4.dhcp-hostname: -- ipv4.dhcp-fqdn: -- ipv4.dhcp-hostname-flags: 0x0 (none) ipv4.never-default: yes ipv4.may-fail: yes ipv4.required-timeout: -1 (default) ipv4.dad-timeout: -1 (default) ipv4.dhcp-vendor-class-identifier: -- ipv4.dhcp-ipv6-only-preferred: -1 (default) ipv4.link-local: 0 (default) ipv4.dhcp-reject-servers: -- ipv4.auto-route-ext-gw: -1 (default) ipv4.shared-dhcp-range: -- ipv4.shared-dhcp-lease-time: 0 (default) ipv6.method: manual ipv6.dns: 2001:6b0:2:1::53,2001:6b0:2:2::53 ipv6.dns-search: chalmers.se ipv6.dns-options: -- ipv6.dns-priority: 0 ipv6.addresses: 2001:6b0:2:201d::38b/64 ipv6.gateway: -- ipv6.routes: -- ipv6.route-metric: -1 ipv6.route-table: 51860 ipv6.routing-rules: priority 3 not from ::/0 fwmark 0xca94 table 51860, priority 2 to fc00::/7 suppress_prefixlength 0 table 254 ipv6.replace-local-rule: -1 (default) ipv6.dhcp-send-release: -1 (default) ipv6.routed-dns: -1 (default) ipv6.ignore-auto-routes: no ipv6.ignore-auto-dns: no ipv6.never-default: yes ipv6.may-fail: yes ipv6.required-timeout: -1 (default) ipv6.ip6-privacy: -1 (default) ipv6.temp-valid-lifetime: 0 (default) ipv6.temp-preferred-lifetime: 0 (default) ipv6.addr-gen-mode: default ipv6.ra-timeout: 0 (default) ipv6.mtu: auto ipv6.dhcp-pd-hint: -- ipv6.dhcp-duid: -- ipv6.dhcp-iaid: -- ipv6.dhcp-timeout: 0 (default) ipv6.dhcp-send-hostname-deprecated: yes ipv6.dhcp-send-hostname: -1 (default) ipv6.dhcp-hostname: -- ipv6.dhcp-hostname-flags: 0x0 (none) ipv6.auto-route-ext-gw: -1 (default) ipv6.token: -- wireguard.private-key: <hidden> wireguard.private-key-flags: 0 (none) wireguard.listen-port: 0 wireguard.fwmark: 0xca94 wireguard.peer-routes: yes wireguard.mtu: 0 wireguard.ip4-auto-default-route: 0 (false) wireguard.ip6-auto-default-route: 0 (false) proxy.method: none proxy.browser-only: no proxy.pac-url: -- proxy.pac-script: -- GENERAL.NAME: eduVPN GENERAL.UUID: 73c688d6-6108-4924-800b-ff4e0ea92853 GENERAL.DEVICES: eduVPN GENERAL.IP-IFACE: eduVPN GENERAL.STATE: activated GENERAL.DEFAULT: no GENERAL.DEFAULT6: no GENERAL.SPEC-OBJECT: -- GENERAL.VPN: no GENERAL.DBUS-PATH: /org/freedesktop/NetworkManager/ActiveConnection/6 GENERAL.CON-PATH: /org/freedesktop/NetworkManager/Settings/10 GENERAL.ZONE: -- GENERAL.MASTER-PATH: -- IP4.ADDRESS[1]: 172.29.3.139/17 IP4.GATEWAY: -- IP4.ROUTE[1]: dst = 10.16.3.0/24, nh = 0.0.0.0, mt = 50, table=51860 IP4.ROUTE[2]: dst = 16.16.18.104/32, nh = 0.0.0.0, mt = 50, table=51860 IP4.ROUTE[3]: dst = 89.44.250.74/32, nh = 0.0.0.0, mt = 50, table=51860 IP4.ROUTE[4]: dst = 129.16.0.0/18, nh = 0.0.0.0, mt = 50, table=51860 IP4.ROUTE[5]: dst = 129.16.64.0/22, nh = 0.0.0.0, mt = 50, table=51860 IP4.ROUTE[6]: dst = 129.16.68.0/24, nh = 0.0.0.0, mt = 50, table=51860 IP4.ROUTE[7]: dst = 129.16.69.0/27, nh = 0.0.0.0, mt = 50, table=51860 IP4.ROUTE[8]: dst = 129.16.69.32/32, nh = 0.0.0.0, mt = 50, table=51860 IP4.ROUTE[9]: dst = 129.16.69.34/31, nh = 0.0.0.0, mt = 50, table=51860 IP4.ROUTE[10]: dst = 129.16.69.36/30, nh = 0.0.0.0, mt = 50, table=51860 IP4.ROUTE[11]: dst = 129.16.69.40/29, nh = 0.0.0.0, mt = 50, table=51860 IP4.ROUTE[12]: dst = 129.16.69.48/28, nh = 0.0.0.0, mt = 50, table=51860 IP4.ROUTE[13]: dst = 129.16.69.64/26, nh = 0.0.0.0, mt = 50, table=51860 IP4.ROUTE[14]: dst = 129.16.69.128/25, nh = 0.0.0.0, mt = 50, table=51860 IP4.ROUTE[15]: dst = 129.16.70.0/23, nh = 0.0.0.0, mt = 50, table=51860 IP4.ROUTE[16]: dst = 129.16.72.0/21, nh = 0.0.0.0, mt = 50, table=51860 IP4.ROUTE[17]: dst = 129.16.80.0/20, nh = 0.0.0.0, mt = 50, table=51860 IP4.ROUTE[18]: dst = 129.16.96.0/19, nh = 0.0.0.0, mt = 50, table=51860 IP4.ROUTE[19]: dst = 129.16.128.0/17, nh = 0.0.0.0, mt = 50, table=51860 IP4.ROUTE[20]: dst = 172.29.0.0/17, nh = 0.0.0.0, mt = 50, table=51860 IP4.ROUTE[21]: dst = 188.95.227.78/32, nh = 0.0.0.0, mt = 50, table=51860 IP4.ROUTE[22]: dst = 192.71.193.166/32, nh = 0.0.0.0, mt = 50, table=51860 IP4.ROUTE[23]: dst = 172.29.0.0/17, nh = 0.0.0.0, mt = 50, table=51860 IP4.DNS[1]: 129.16.1.53 IP4.DNS[2]: 129.16.2.53 IP4.SEARCHES[1]: chalmers.se IP6.ADDRESS[1]: fe80::ee6b:982e:4b43:c679/64 IP6.ADDRESS[2]: 2001:6b0:2:201d::38b/64 IP6.GATEWAY: -- IP6.ROUTE[1]: dst = 2001:6b0:2::/48, nh = ::, mt = 50, table=51860 IP6.ROUTE[2]: dst = 2001:6b0:2:201d::/64, nh = ::, mt = 50, table=51860 IP6.ROUTE[3]: dst = fe80::/64, nh = ::, mt = 1024, table=51860 IP6.DNS[1]: 2001:6b0:2:1::53 IP6.DNS[2]: 2001:6b0:2:2::53 IP6.SEARCHES[1]: chalmers.se ```

I don't think this has to do with eduVPN: the DNS servers provided by Chalmers fail to resolve chalmers.se or intranet.chalmers.se. I've contacted Chalmers IT support about this, will update here if they reply.

I don't think this has to do with eduVPN: the DNS servers provided by Chalmers fail to resolve `chalmers.se` or `intranet.chalmers.se`. I've contacted Chalmers IT support about this, will update here if they reply.

Upon further investigation, those servers do resolve chalmers.se but only if the request comes from inside the Chalmers network, which it is supposed to if the VPN is working correctly. So it seems like we are both running into #407: eduVPN is not properly configuring routes ((削除) indeed ip r get 129.16.1.53 shows my default network interface instead of the WireGuard one (削除ここまで) can't reproduce now).

Upon further investigation, those servers *do* resolve `chalmers.se` but only if the request comes from inside the Chalmers network, which it is supposed to if the VPN is working correctly. So it seems like we are both running into https://codeberg.org/eduVPN/linux-app/issues/407: eduVPN is not properly configuring routes (~~indeed `ip r get 129.16.1.53` shows my default network interface instead of the WireGuard one~~ can't reproduce now).

OK, so the server lcvpn.chalmers.se is accessible over IPv4 but not IPv6, despite having an AAAA record. I've asked IT support about this. In the meantime, adding 129.16.68.194 lcvpn.chalmers.se to /etc/hosts fixed the issue for me. Could you check if this works for you?

(I also had to set reverse path filtering to "loose", as per https://wiki.nixos.org/wiki/WireGuard#NetworkManager_Proxy_client_setup.)

OK, so the server `lcvpn.chalmers.se` is accessible over IPv4 but not IPv6, despite having an AAAA record. I've asked IT support about this. In the meantime, adding `129.16.68.194 lcvpn.chalmers.se` to `/etc/hosts` fixed the issue for me. Could you check if this works for you? (I also had to set reverse path filtering to "loose", as per https://wiki.nixos.org/wiki/WireGuard#NetworkManager_Proxy_client_setup.)

Now everything works for me, maybe Chalmers IT fixed the IPv6 issues.

Now everything works for me, maybe Chalmers IT fixed the IPv6 issues.

Can confirm that it works now.

Can confirm that it works now.

Anything left to do for eduVPN?

Anything left to do for eduVPN?

I don't believe so.

I don't believe so.

Thanks! Let me know if I should re-open

Thanks! Let me know if I should re-open
Sign in to join this conversation.
No Branch/Tag specified
master
upstream-deb
openvpn-persistent
1.x
4.7.2
4.7.1
4.7.0
4.6.0
4.5.1
4.5.0
4.4.99.0
4.4.0
4.3.1
4.3.0
4.2.99.1
4.2.99.0
4.2.1
4.2.0
4.1.99.0
4.1.3
4.1.2
4.1.1
4.1.0
3.1.1
4.0.1
4.0.0
pr-3.3.1
pr-3.3.0
pr-3.2.0
3.1.0
3.0.0
2.2.1
2.2.0
2.1.0
2.0.0
1.1
1.0.3
1.0.2
1.0.1
1.0rc17
1.0rc16
1.0rc15
1.0rc14
1.0rc13
1.0rc12
1.0rc11
1.0rc10
1.0rc9
1.0rc8
1.0rc7
1.0rc6
1.0rc5
1.0rc4
1.0rc3
1.0rc2
1.0rc1
0.8
0.7.2
0.7.1
0.7
0.6.1
0.6
0.5.1
0.5
0.3
0.2.1
0.2
0.1.1
0.1
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
3 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
eduVPN/linux-app#681
Reference in a new issue
eduVPN/linux-app
No description provided.
Delete branch "%!s()"

Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?