Checking if VPN is working correctly
How to make sure, that all traffic (e.g. from web browser) is passing through VPN and no data is leaking through normal internet interface? Or how to check, what interface (VPN or other) is used by application? Is there any monitoring system tools, that could ensure me whether VPN is working correctly? I'm using OpenVPN client on Windows and Linux.
linux windows networking vpn openvpn
asked Apr 22 '14 at 12:46
NiegodziwyBeruNiegodziwyBeru
11115
add a comment |
How to make sure, that all traffic (e.g. from web browser) is passing through VPN and no data is leaking through normal internet interface? Or how to check, what interface (VPN or other) is used by application? Is there any monitoring system tools, that could ensure me whether VPN is working correctly? I'm using OpenVPN client on Windows and Linux.
linux windows networking vpn openvpn
asked Apr 22 '14 at 12:46
NiegodziwyBeruNiegodziwyBeru
11115
1
Wireshark is always useful in a situation like this.
– Ramhound
Apr 22 '14 at 13:45
add a comment |
How to make sure, that all traffic (e.g. from web browser) is passing through VPN and no data is leaking through normal internet interface? Or how to check, what interface (VPN or other) is used by application? Is there any monitoring system tools, that could ensure me whether VPN is working correctly? I'm using OpenVPN client on Windows and Linux.
linux windows networking vpn openvpn
asked Apr 22 '14 at 12:46
NiegodziwyBeruNiegodziwyBeru
11115
How to make sure, that all traffic (e.g. from web browser) is passing through VPN and no data is leaking through normal internet interface? Or how to check, what interface (VPN or other) is used by application? Is there any monitoring system tools, that could ensure me whether VPN is working correctly? I'm using OpenVPN client on Windows and Linux.
linux windows networking vpn openvpn
linux windows networking vpn openvpn
asked Apr 22 '14 at 12:46
NiegodziwyBeruNiegodziwyBeru
11115
asked Apr 22 '14 at 12:46
NiegodziwyBeruNiegodziwyBeru
11115
asked Apr 22 '14 at 12:46
NiegodziwyBeruNiegodziwyBeru
11115
asked Apr 22 '14 at 12:46
NiegodziwyBeruNiegodziwyBeru
11115
asked Apr 22 '14 at 12:46
NiegodziwyBeruNiegodziwyBeru
11115
11115
1
Wireshark is always useful in a situation like this.
– Ramhound
Apr 22 '14 at 13:45
add a comment |
1
Wireshark is always useful in a situation like this.
– Ramhound
Apr 22 '14 at 13:45
1
1
Wireshark is always useful in a situation like this.
– Ramhound
Apr 22 '14 at 13:45
Wireshark is always useful in a situation like this.
– Ramhound
Apr 22 '14 at 13:45
add a comment |
2 Answers
2
active
oldest
votes
Basically if split tunneling is turned off, all traffic must flow over the vpn however try tracert command on both Windows and Linux and you should hopefully get a trace of the route that packets take to reach the destination then You'll be able to tell if it's passing through your VPN gateway.
e.g. tracert www.yahoo.com
You can also use an IP address instead of a DNS name.
answered Apr 23 '14 at 15:42
Rose AbRose Ab
23114
add a comment |
First of all check your default gateway settings with route or ip route show command. If you want all ip packets from all applications use VPN tunnel your default gateway must be on the VPN server side (for most cases it's the VPN server's IP address).
If your default gateway is the same before and after connecting to the VPN then you need to change it manually.
If you have white IP address from your ISP on one of your network interfaces and you have a routing rule to your ISP network with network mask other then /32 then all your traffic for this particular network will pass through your network interface with a white address because connected routes has higher priority.
answered May 5 '14 at 14:42
AlexAndersanAlexAndersan
42139
add a comment |
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "3"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f744584%2fchecking-if-vpn-is-working-correctly%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
2 Answers
2
active
oldest
votes
2 Answers
2
active
oldest
votes
active
oldest
votes
active
oldest
votes
Basically if split tunneling is turned off, all traffic must flow over the vpn however try tracert command on both Windows and Linux and you should hopefully get a trace of the route that packets take to reach the destination then You'll be able to tell if it's passing through your VPN gateway.
e.g. tracert www.yahoo.com
You can also use an IP address instead of a DNS name.
answered Apr 23 '14 at 15:42
Rose AbRose Ab
23114
add a comment |
Basically if split tunneling is turned off, all traffic must flow over the vpn however try tracert command on both Windows and Linux and you should hopefully get a trace of the route that packets take to reach the destination then You'll be able to tell if it's passing through your VPN gateway.
e.g. tracert www.yahoo.com
You can also use an IP address instead of a DNS name.
answered Apr 23 '14 at 15:42
Rose AbRose Ab
23114
add a comment |
Basically if split tunneling is turned off, all traffic must flow over the vpn however try tracert command on both Windows and Linux and you should hopefully get a trace of the route that packets take to reach the destination then You'll be able to tell if it's passing through your VPN gateway.
e.g. tracert www.yahoo.com
You can also use an IP address instead of a DNS name.
answered Apr 23 '14 at 15:42
Rose AbRose Ab
23114
Basically if split tunneling is turned off, all traffic must flow over the vpn however try tracert command on both Windows and Linux and you should hopefully get a trace of the route that packets take to reach the destination then You'll be able to tell if it's passing through your VPN gateway.
e.g. tracert www.yahoo.com
You can also use an IP address instead of a DNS name.
answered Apr 23 '14 at 15:42
Rose AbRose Ab
23114
answered Apr 23 '14 at 15:42
Rose AbRose Ab
23114
answered Apr 23 '14 at 15:42
Rose AbRose Ab
23114
answered Apr 23 '14 at 15:42
Rose AbRose Ab
23114
23114
add a comment |
add a comment |
First of all check your default gateway settings with route or ip route show command. If you want all ip packets from all applications use VPN tunnel your default gateway must be on the VPN server side (for most cases it's the VPN server's IP address).
If your default gateway is the same before and after connecting to the VPN then you need to change it manually.
If you have white IP address from your ISP on one of your network interfaces and you have a routing rule to your ISP network with network mask other then /32 then all your traffic for this particular network will pass through your network interface with a white address because connected routes has higher priority.
answered May 5 '14 at 14:42
AlexAndersanAlexAndersan
42139
add a comment |
First of all check your default gateway settings with route or ip route show command. If you want all ip packets from all applications use VPN tunnel your default gateway must be on the VPN server side (for most cases it's the VPN server's IP address).
If your default gateway is the same before and after connecting to the VPN then you need to change it manually.
If you have white IP address from your ISP on one of your network interfaces and you have a routing rule to your ISP network with network mask other then /32 then all your traffic for this particular network will pass through your network interface with a white address because connected routes has higher priority.
answered May 5 '14 at 14:42
AlexAndersanAlexAndersan
42139
add a comment |
First of all check your default gateway settings with route or ip route show command. If you want all ip packets from all applications use VPN tunnel your default gateway must be on the VPN server side (for most cases it's the VPN server's IP address).
If your default gateway is the same before and after connecting to the VPN then you need to change it manually.
If you have white IP address from your ISP on one of your network interfaces and you have a routing rule to your ISP network with network mask other then /32 then all your traffic for this particular network will pass through your network interface with a white address because connected routes has higher priority.
answered May 5 '14 at 14:42
AlexAndersanAlexAndersan
42139
First of all check your default gateway settings with route or ip route show command. If you want all ip packets from all applications use VPN tunnel your default gateway must be on the VPN server side (for most cases it's the VPN server's IP address).
If your default gateway is the same before and after connecting to the VPN then you need to change it manually.
If you have white IP address from your ISP on one of your network interfaces and you have a routing rule to your ISP network with network mask other then /32 then all your traffic for this particular network will pass through your network interface with a white address because connected routes has higher priority.
answered May 5 '14 at 14:42
AlexAndersanAlexAndersan
42139
edited May 5 '14 at 14:51
answered May 5 '14 at 14:42
AlexAndersanAlexAndersan
42139
answered May 5 '14 at 14:42
AlexAndersanAlexAndersan
42139
answered May 5 '14 at 14:42
AlexAndersanAlexAndersan
42139
42139
add a comment |
add a comment |
Thanks for contributing an answer to Super User!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f744584%2fchecking-if-vpn-is-working-correctly%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
1
Wireshark is always useful in a situation like this.
– Ramhound
Apr 22 '14 at 13:45