microsoft / microsoft/WSL

Unable to access any private IP (Cisco Anyconnect VPN) from WSL2 only

Open
#13,776 26 comments 7 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

network
Dominant language
C++
Stars
33.7k
Forks
1.8k
Avg merge
3d 17h
Merged PRs (30d)
116

Description

### Windows Version

10.0.26100.7171

### WSL Version

2.6.1.0

### Are you using WSL 1 or WSL 2?

- [x] WSL 2
- [ ] WSL 1

### Kernel Version

6.6.87.2-1

### Distro Version

Ubuntu 20.04

### Other Software

_No response_

### Repro Steps

1. start Cisco Anyconnect VPN on Windows
2. launch WSL2 ( networking mode set to mirrored in .wslconfig file)
3. From WSL2, ping any private IP address of the VPN, It does not work:
> dev@pc1:~$ ping -c 4 192.168.222.75
> PING 192.168.222.75 (192.168.222.75) 56(84) bytes of data.
> From 192.168.119.224 icmp_seq=1 Destination Host Unreachable
> From 192.168.119.224 icmp_seq=2 Destination Host Unreachable
> From 192.168.119.224 icmp_seq=3 Destination Host Unreachable
> From 192.168.119.224 icmp_seq=4 Destination Host Unreachable
> --- 192.168.222.75 ping statistics ---
> 4 packets transmitted, 0 received, +4 errors, 100% packet loss, time 3129ms
> pipe 3
> dev@pc1:~$

4. pinging same private IP from windows terminal works!
> PS C:\Users> ping 192.168.222.75
> Pinging 192.168.222.75 with 32 bytes of data:
> Reply from 192.168.222.75: bytes=32 time=21ms TTL=63
> Reply from 192.168.222.75: bytes=32 time=16ms TTL=63
> Reply from 192.168.222.75: bytes=32 time=21ms TTL=63
> Reply from 192.168.222.75: bytes=32 time=14ms TTL=63

### Expected Behavior

pinging private VPN IP should have worked on WSL2.
Note: There was no issue before, i.e. it used to work before the latest Windows11 Update

### Actual Behavior

pinging private VPN IP not working on WSL2 only

### Diagnostic Logs

_No response_

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

No source file or test is named. Reproduce with WSL2 in mirrored networking mode, Cisco AnyConnect active, and a ping to a private VPN IP; compare the WSL2 result with Windows and verify that private VPN addresses become reachable from WSL2 again.

Written by the indexing model from the issue text.

Assessment

Tech stack
linux, ubuntu
Domain
networking, operating-systems
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Mostly clear
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.