319 字
2 分鐘
VPN Connected but Can't Reach Internal Network? It's Actually the Route Leading You Astray
Conclusion
- If your VPN can’t reach the internal network, it’s usually not broken, but rather the route is misconfigured; deleting the incorrect route will restore connectivity.
Where This Applies
- VPN is connected but cannot reach DB / internal network hosts
pingfails but DNS resolves correctly- Azure / corporate internal network hybrid environments
- Troubleshooting network issues in Windows environments
Steps
1. Check Current Routing Status
- Execute
route printto view the routing table - Identify if the target IP is being routed to the VPN gateway
- If you see a
/32single IP pointing to the VPN, that’s usually the source of the problem
route print👉 The key isn’t “if there’s a route,” but “where it leads”
2. Determine if VPN is Misrouting
- Confirm if the target IP (e.g., 10.x.x.x) should originally go via LAN
- If the route points to the VPN gateway, it means traffic is being forcibly misrouted
- Common scenarios: misconfigured split tunnel or VPN pushing incorrect routes 👉 If DNS is normal but you can’t connect, this is usually the problem
3. Delete Incorrect Route (Quick Fix)
- Directly delete the specified IP route
- Windows will re-select the optimal path (usually back to LAN)
route delete 10.1.1.10route delete 10.1.1.11👉 After deleting, re-ping / reconnect; connectivity usually restores immediately
4. (Optional) Manually Correct Route
- If the VPN keeps overwriting, you can manually add the correct route
- Specify to go via the local gateway to prevent it from being hijacked again
route add 10.1.1.10 mask 255.255.255.255 192.168.1.1 metric 1👉 Lower metric means higher priority, used to “override the VPN”
Additional Notes
nslookup normal ≠ connection normal- VPNs often push
/32precise routes, which can easily cause issues - Restarting the VPN might re-add the incorrect route
Commands / Examples Summary
# 查看路由route print
# 刪除錯誤 routeroute delete 10.1.1.10
# 手動指定正確路由route add 10.1.1.10 mask 255.255.255.255 192.168.1.1 metric 1Wrap-up
- When the network is down, often it’s not broken, but just taking the wrong path
- Check the route first, then question the world; it will be much more efficient
VPN Connected but Can't Reach Internal Network? It's Actually the Route Leading You Astray
https://joyceowo.github.io/posts/en/32ea78ea09fa80b2ac57fb26e2eb69cb/