SSL VPN Full Tunnel not routing IPv4 traffic

Hi DangoPC,

Thank you for reaching out to Sophos Community.

Kindly try to set the lease mode to Ipv4 and IPv6 both under SSL VPN global Settings

Also, create an Allow rule for IPv6 to pass through your Firewall to LAN.

Check the log viewer and do a Packet capture to determine what has transpired with the packet.

Kindly see the following post with similar cases

•  Enable IPv6 on SSL VPN 
•  Sophos XG v18MR3 SophosConnect v2. Problems with IPv6 and DNS 

I tried to use IPv4 and IPv6 both options in SSLVPN. That didn't help. I do not have IPv6 available on the WAN side. Note VPN was working before the update to v20.

I also noticed that I am getting this error on OpenVPN:

exception parsing IPv4 route:

[route] [remote_host] [255.255.255.255] [net_gateway] : 

addr_pair_mask_parse_error: AddrMaskPair parse error

'route': remote_host/255.255.255.255 : ip_exception: error parsing route IP address 'remote_host' : Inalid argument.

I am unable to ping the VPN gateway either when I am connected with this error.

Hi Erick,

My organisation is also experiencing this issue, which has only just reared its head with OpenVPN Connect for Android self-updating to v3.4.0

When we roll the app back, it works fine. OpenVPN Connect for Windows and iOS seem to still be working correctly.

Thanks,

Hugh.

Hello there,

Thank you for contacting the Sophos Community.

If you’re able to replicate this issue, please open a Case with Support and share the Case ID with us.

Regards,

Thanks for the info. Now my question is where to find the OpenVPN v3.3 apk? I don't download the option on the OpenVPN website for APKs.

openvpn-connect.en.uptodown.com/.../versions

Thanks a lot. Can confirm it works with the 3.3.4 version. I still see the parsing error, but it's routing traffic now at least.