qubes-doc/user/troubleshooting/vpn-troubleshooting.md

36 lines
1.1 KiB
Markdown
Raw Normal View History

2020-10-30 10:07:40 -04:00
---
lang: en
2020-10-30 10:07:40 -04:00
layout: doc
permalink: /doc/vpn-troubleshooting/
ref: 240
title: VPN Troubleshooting
2020-10-30 10:07:40 -04:00
---
# VPN Troubleshooting Guide
2020-10-30 10:07:40 -04:00
## Tips
2020-10-30 10:07:40 -04:00
2020-11-01 08:50:05 -05:00
* If using qubes-vpn, check the VPN service's log in the VPN VM by running:
2020-10-30 10:07:40 -04:00
~~~
sudo journalctl -u qubes-vpn-handler
~~~
* Always test your basic VPN connection before adding scripts.
2020-10-30 10:07:40 -04:00
* Test DNS: Ping a familiar domain name from an appVM. It should print the IP address for the domain.
* Use `iptables -L -v` and `iptables -L -v -t nat` to check firewall rules. The latter shows the critical PR-QBS chain that enables DNS forwarding.
## VPN does not reconnect after suspend
2020-11-01 08:50:05 -05:00
This applies when using OpenVPN.
2020-11-01 08:50:05 -05:00
After suspend/resume, OpenVPN may not automatically reconnect. In order to get it to work, you must kill the OpenVPN process and restart it.
2020-10-30 10:07:40 -04:00
## VPN stuck at "Ready to start link"
2020-10-30 10:07:40 -04:00
After setting up OpenVPN and restarting the VM, you may be repeatedly getting the popup "Ready to start link", but the VPN isn't connected.
2020-10-30 10:07:40 -04:00
To figure out the root of the problem, check the VPN logs in `/var/logs/syslog`. The log may reveal issues like missing OpenVPN libraries, which you can then install.