Android client routes all traffic via VPN

Gil

After performing client exports for windows and for Android,
I find that Windows allows internet browsing whilst an OpenVPN connection to the Server is active,
but the Android client does not.
Do I need to add something to the ovpn config file for Android?

AndrewZ

Check for "redirect-gateway" in the config files you have.

Gil

@AndrewZ:

Check for "redirect-gateway" in the config files you have.

I did check for that, it's not included.
Was wondering if I had to specify the the inverse?

Here is my config (minus the certs):

persist-tun
persist-key
cipher AES-256-CBC
auth SHA1
tls-client
client
remote xxx.dyndns.org 11111 tcp-client
verify-x509-name "xxx" name
auth-user-pass
remote-cert-tls server

AndrewZ

Make sure you're using the right client on Android: https://play.google.com/store/apps/details?id=de.blinkt.openvpn
Then check your connection settings on the "Routing" tab.
I'm also thinking about possible DNS issues, worth to check as well.

Gil

Thanks for your reply.

Already using suggested app.
Config also looks correct, from the routing tab.
Unsure about possible DNS issues.

Possibly a Samsung (S6 - Nougat) issue?

duren

It should be working. Make sure in the app you set in a profile

1. Routing - ipv4 and possibly ipv6: check use default route
2. Allowed apps - use formally apps except selected and don't select any.

AndrewZ

@duren:

1. check use default route

I think this is what OP is trying to avoid, i.e. VPN connection should be used only to access resources on another network. Please correct me if I'm wrong.

Gil

@AndrewZ:

@duren:

1. check use default route

I think this is what OP is trying to avoid, i.e. VPN connection should be used only to access resources on another network. Please correct me if I'm wrong.

Correct, that is what I am trying to avoid.

Everything is on default, & client export works correctly for windows but not for Android.
I will attempt it on iOS.

Gil

Did it on iOS - All correct.

Re-installed on Samsung & rebooted; all is working correctly.

Thanks for your help anyway, it made me go through and check all settings.