319 字
2 分鐘
瀏覽次數
VPN Connected but Can't Reach Internal Network? It's Actually the Route Leading You Astray
2026-03-25
2026-04-07

Conclusion#

  • If your VPN can’t reach the internal network, it’s usually not broken, but rather the route is misconfigured; deleting the incorrect route will restore connectivity.

Where This Applies#

  • VPN is connected but cannot reach DB / internal network hosts
  • ping fails but DNS resolves correctly
  • Azure / corporate internal network hybrid environments
  • Troubleshooting network issues in Windows environments

Steps#

1. Check Current Routing Status#

  • Execute route print to view the routing table
  • Identify if the target IP is being routed to the VPN gateway
  • If you see a /32 single IP pointing to the VPN, that’s usually the source of the problem
Terminal window
route print

👉 The key isn’t “if there’s a route,” but “where it leads”

2. Determine if VPN is Misrouting#

  • Confirm if the target IP (e.g., 10.x.x.x) should originally go via LAN
  • If the route points to the VPN gateway, it means traffic is being forcibly misrouted
  • Common scenarios: misconfigured split tunnel or VPN pushing incorrect routes 👉 If DNS is normal but you can’t connect, this is usually the problem

3. Delete Incorrect Route (Quick Fix)#

  • Directly delete the specified IP route
  • Windows will re-select the optimal path (usually back to LAN)
Terminal window
route delete 10.1.1.10
route delete 10.1.1.11

👉 After deleting, re-ping / reconnect; connectivity usually restores immediately

4. (Optional) Manually Correct Route#

  • If the VPN keeps overwriting, you can manually add the correct route
  • Specify to go via the local gateway to prevent it from being hijacked again
Terminal window
route add 10.1.1.10 mask 255.255.255.255 192.168.1.1 metric 1

👉 Lower metric means higher priority, used to “override the VPN”

Additional Notes#

  • nslookup normal ≠ connection normal
  • VPNs often push /32 precise routes, which can easily cause issues
  • Restarting the VPN might re-add the incorrect route

Commands / Examples Summary#

Terminal window
# 查看路由
route print
# 刪除錯誤 route
route delete 10.1.1.10
# 手動指定正確路由
route add 10.1.1.10 mask 255.255.255.255 192.168.1.1 metric 1

Wrap-up#

  • When the network is down, often it’s not broken, but just taking the wrong path
  • Check the route first, then question the world; it will be much more efficient
VPN Connected but Can't Reach Internal Network? It's Actually the Route Leading You Astray
https://joyceowo.github.io/posts/en/32ea78ea09fa80b2ac57fb26e2eb69cb/
作者
JoyceOwO
發佈於
2026-03-25
許可協議
CC BY-NC-SA 4.0