Connect to lan

waspdk

Is there a way to allow connections to lan (eg. 192.168.1.1) while running PIA

martouf

if you use the PIA client without the killswitch, then by default you will still have a route to your LAN. (see route -n output)

waspdk

martouf said:

if you use the PIA client without the killswitch, then by default you will still have a route to your LAN. (see route -n output)

Nope.PIA dosent allow for access to LAN when running (with or without killswitch)

PS/ Unless of course you remember to save settings. So you where correct and now i works. Thx

martouf

yes, it does "allow for access". but setting up your routing table can go wrong. i used to have to put the default route back in when using openvpn manually.

[Deleted User]

This isn't possible with the PIA app at the moment, but I'd recommend signing up for the beta program 

martouf

well, okay, @PIAColleen , if you say so, but here's what my route table looks like: 1) before bringing VPN up, and, 2) after bringing VPN up

$ route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         192.168.1.1     0.0.0.0         UG    600    0        0 wlp14s0
169.254.0.0     0.0.0.0         255.255.0.0     U     1000   0        0 wlp14s0
192.168.1.0     0.0.0.0         255.255.255.0   U     600    0        0 wlp14s0
$ route -n
Kernel IP routing table
Destination     Gateway         Genmask         Flags Metric Ref    Use Iface
0.0.0.0         10.6.10.5       128.0.0.0       UG    0      0        0 tun0
0.0.0.0         192.168.1.1     0.0.0.0         UG    600    0        0 wlp14s0
10.6.10.1       10.6.10.5       255.255.255.255 UGH   0      0        0 tun0
10.6.10.5       0.0.0.0         255.255.255.255 UH    0      0        0 tun0
128.0.0.0       10.6.10.5       128.0.0.0       UG    0      0        0 tun0
169.254.0.0     0.0.0.0         255.255.0.0     U     1000   0        0 wlp14s0
173.199.65.62   192.168.1.1     255.255.255.255 UGH   0      0        0 wlp14s0
192.168.1.0     0.0.0.0         255.255.255.0   U     600    0        0 wlp14s0

note that I can still access my LAN systems after the VPN is up, because there still is a default route to my LAN.

i'm not using the killswitch. and i've done no specific configuration to accomplish this.

ps: v79 here

[Deleted User]

@martouf, sorry about that, I should've been clearer - it should indeed be possible to access the LAN so long as the killswitch is not enabled. However, we do have some exciting new functionality coming on Linux with regards to LAN access with the killswitch enabled, which is why I recommended signing up for the beta.