wsl 2 ubuntu 18.04 unable to connect to IP resources with Cisco Annyconnect active

[eclay11]

Please fill out the below information:

• Your Windows build number: (Type ver at a Windows Command Prompt)
  Microsoft Windows [Version 10.0.18932.1000]

• What you're doing and what's happening: (Copy&paste the full set of specific command-line steps necessary to reproduce the behavior, and their output. Include screen shots if that helps demonstrate the problem.)
  I've installed ubuntu 18.04 and converted it to wsl v2 using the following command in windows powershell running as administrator.
  PS C:\WINDOWS\system32> wsl --set-version Ubuntu-18.04 2

When I start the Ubuntuu 18.04 instance I'm able to communicate with resources using IPs and hostnames.

eclay@wh-lpt-eclay:$ ping 8.8.8.8
PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.
64 bytes from 8.8.8.8: icmp_seq=1 ttl=49 time=115 ms
64 bytes from 8.8.8.8: icmp_seq=2 ttl=49 time=95.4 ms
64 bytes from 8.8.8.8: icmp_seq=3 ttl=49 time=77.3 ms
64 bytes from 8.8.8.8: icmp_seq=4 ttl=49 time=92.6 ms
64 bytes from 8.8.8.8: icmp_seq=5 ttl=49 time=90.6 ms
64 bytes from 8.8.8.8: icmp_seq=6 ttl=49 time=78.9 ms
64 bytes from 8.8.8.8: icmp_seq=7 ttl=49 time=84.1 ms
64 bytes from 8.8.8.8: icmp_seq=8 ttl=49 time=90.9 ms
64 bytes from 8.8.8.8: icmp_seq=9 ttl=49 time=80.7 ms
64 bytes from 8.8.8.8: icmp_seq=10 ttl=49 time=80.0 ms
^C
--- 8.8.8.8 ping statistics ---
10 packets transmitted, 10 received, 0% packet loss, time 9081ms
rtt min/avg/max/mdev = 77.316/88.602/115.084/10.734 ms
eclay@wh-lpt-eclay:~$ trace
tracepath traceroute6 traceroute6.iputils tracerpt.exe
eclay@wh-lpt-eclay:$ tracepath 8.8.8.8
1?: [LOCALHOST] pmtu 1500
1: wh-lpt-eclay.mshome.net 0.497ms
1: wh-lpt-eclay.mshome.net 0.379ms
2: 10.179.10.1 2.890ms
3: 192.168.1.1 8.474ms
4: 192.168.1.1 10.395ms pmtu 1430
4: 172.26.96.161 71.223ms
5: 172.18.84.36 73.898ms asymm 6
6: 12.249.2.25 73.083ms asymm 7
7: 12.122.146.97 96.016ms asymm 14
8: 12.122.111.33 95.857ms asymm 13
9: sffca22crs.ip.att.net 95.209ms asymm 12
10: 12.122.163.61 90.288ms asymm 11
11: 12.255.10.236 103.555ms asymm 15
12: no reply
13: no reply
14: no reply
15: no reply
16: no reply
17: no reply
18: no reply
19: no reply
20: no reply
21: no reply
22: no reply
23: no reply
24: no reply
25: no reply
26: no reply
27: no reply
28: no reply
29: no reply
30: no reply
Too many hops: pmtu 1430 Resume: pmtu 1430

Once I connect to my work VPN using cisco annyconnect client v 4.7.00136 I'm not longer able to connect to IP resources.

eclay@wh-lpt-eclay:$ ping 8.8.8.8
PING 8.8.8.8 (8.8.8.8) 56(84) bytes of data.
^C
--- 8.8.8.8 ping statistics ---
8 packets transmitted, 0 received, 100% packet loss, time 7277ms

eclay@wh-lpt-eclay:$ tracepath 8.8.8.8
1?: [LOCALHOST] pmtu 1430
1: ??? 0.362ms
1: ??? 0.364ms
2: ??? 0.392ms pmtu 1200
2: no reply
3: no reply
4: no reply
5: no reply
6: no reply
7: no reply
8: no reply
9: no reply
10: no reply
11: no reply
12: no reply
13: no reply
14: no reply
15: no reply
16: no reply
17: no reply
18: no reply
19: no reply
20: no reply
21: no reply
22: no reply
23: no reply
24: no reply
25: no reply
26: no reply
27: no reply
28: no reply
29: no reply
30: no reply
Too many hops: pmtu 1200
Resume: pmtu 1200

• What's wrong / what should be happening instead:
  I should be able to ping 8.8.8.8 or other outside IPs once the annyconnect vpn client is running.

Not 100% sure, but it can be that annyconnecy blocks any dns server except provided by connection. I was observed something similar and was unable to disable this behaviour.

[eclay11]

I've tried the method of creating a manual named.conf and it didn't fix anything. I can ping the 1st dns server from windows but not from ubuntu.
Windows DNS servers after vpn connection established.

DNS Servers . . . . . . . . . . . : 172.24.0.25
8.8.8.8
C:\Users\eclay>ping 172.24.0.25

Pinging 172.24.0.25 with 32 bytes of data:
Reply from 172.24.0.25: bytes=32 time=131ms TTL=126
Reply from 172.24.0.25: bytes=32 time=103ms TTL=126
Reply from 172.24.0.25: bytes=32 time=109ms TTL=126

Ubuntu

$ ping 172.24.0.25
PING 172.24.0.25 (172.24.0.25) 56(84) bytes of data.

^C
--- 172.24.0.25 ping statistics ---
190 packets transmitted, 0 received, 100% packet loss, time 196530ms

It seems to be more of a routing problem than a name resolution. For instance I can ping www.microsoft.com from a cmd prompt but not from ubunutu.

windows

ping www.microsoft.com

Pinging e13678.dspb.akamaiedge.net [23.202.232.226] with 32 bytes of data:
Reply from 23.202.232.226: bytes=32 time=103ms TTL=51
Reply from 23.202.232.226: bytes=32 time=105ms TTL=51
Reply from 23.202.232.226: bytes=32 time=121ms TTL=51
Reply from 23.202.232.226: bytes=32 time=109ms TTL=51

Ping statistics for 23.202.232.226:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 103ms, Maximum = 121ms, Average = 109ms

Ubuntu

$ ping 23.202.232.226
PING 23.202.232.226 (23.202.232.226) 56(84) bytes of data.
^C
--- 23.202.232.226 ping statistics ---
5 packets transmitted, 0 received, 100% packet loss, time 4176ms

[WsK]

Having exactly same problem...Errrrr

[kobenauf]

I have the same issue, that from within the WSL 2 shell, I'm unable to use AnyConnect running in Windows. However, in WSL I installed openconnect, and I run:
sudo openconnect --no-dtls -u myUsername vpn.myhost.com
Then I can access my company ip addresses from within WSL 2 sessions, but not from Windows, but this lets me at least ssh and run git, so that's an improvement.

Also, this only works if I disconnect the VPN in Windows first, which is annoying.

[chunkaichang]

Same issue here. I tried to add search list in /etc/resolv.conf followed the guide here but still failed.

[craigloewen-msft]

If you're still experiencing this issue could you please take some networking logs? It will help us diagnose what's going on.

You can find instructions on how to do so here!

[mcurole]

I'm definitely experiencing this issue and I'm running 18970. I can capture logs if needed. The problem is easy to reproduce.

[mcurole]

Well, cancel that. I don't have the Feedback Hub installed and I have another issue where I can't download app from the Microsoft Store because of some weird Microsoft Account issue that I'm working with support on.

[MichaelTong]

Also, if WSL 2 starts first, Cisco AnyConnect will fail to connect.

[MichaelTong]

I filed a feedback in FH. https://aka.ms/AA60j0u

[cmeiklejohn]

Same issue, I filed feedback using Feedback Hub.

[paulguerrero]

I also have the same issue with AnyConnect, also gave feedback in the Hub (although the option to post a recording was grayed out for me).