So I have a .opvn from work, it imports and connects fine in the NM UI, but it seems to takeover the default gateway and tries to tunnel everything, even though it's setup to do split tunneling. When I connect via CLI startup and the openvpn bin directly, it works fine. Here are my routes before, and after the 2 different connection types.

Before connecting through NM:

Code: Select all

Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
default         darkrouter.home 0.0.0.0         UG    600    0        0 wlp1s0
link-local      0.0.0.0         255.255.0.0     U     1000   0        0 virbr0
192.168.10.0    0.0.0.0         255.255.255.0   U     600    0        0 wlp1s0
192.168.122.0   0.0.0.0         255.255.255.0   U     0      0        0 virbr0


After connected via NM

Code: Select all

Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
default         _gateway        0.0.0.0         UG    50     0        0 tun0
default         vyatta0.dc0.f.i 0.0.0.0         UG    600    0        0 wlp1s0
link-local      0.0.0.0         255.255.0.0     U     1000   0        0 virbr0
192.168.10.0    0.0.0.0         255.255.255.0   U     600    0        0 wlp1s0
vyatta0.dc0.f.i 0.0.0.0         255.255.255.255 UH    600    0        0 wlp1s0
192.168.100.0   _gateway        255.255.252.0   UG    50     0        0 tun0
192.168.122.0   0.0.0.0         255.255.255.0   U     0      0        0 virbr0
192.168.123.0   0.0.0.0         255.255.255.0   U     50     0        0 tun0
209.132.243.41  vyatta0.dc0.f.i 255.255.255.255 UGH   600    0        0 wlp1s0


After connecting on the CLI via `sudo openvpn work.opvn`

Code: Select all

Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
default         darkrouter.home 0.0.0.0         UG    600    0        0 wlp1s0
link-local      0.0.0.0         255.255.0.0     U     1000   0        0 virbr0
192.168.10.0    0.0.0.0         255.255.255.0   U     600    0        0 wlp1s0
192.168.100.0   192.168.123.1   255.255.252.0   UG    0      0        0 tun0
192.168.122.0   0.0.0.0         255.255.255.0   U     0      0        0 virbr0
192.168.123.0   0.0.0.0         255.255.255.0   U     0      0        0 tun0

Figured it out! A very NON-intuitive option.

System Settings -> Connections
Select the VPN that's setup
Pane on the right, select IPv4 tab
Routes button at the bottom
Check the "Use only for resources on this connection"
-- The tooltip for this is "If enabled, this connection will never be used as the default network connection", e.g. never be set as the Default Route/Gateway.
Do the same thing in the IPv6 tab

Once I saw the tooltip it made sense, but without seeing the tooltip it didn't immediately grab me. I think this should have sub-text, not tooltip, saying this will prevent the default route from being set, or an option when importing to ask if this should be set or not.