My local network is
Gateway is
Host IP is (windows 10)
VM IP is (Linux)
Docker containers inside VM is

When I started Cisco VPN, the VPN network is

route print

      2            on link    257            on link    257            on link    257            on link    331            on link    331            on link    331            on link     36            on link    291            on link    281     36            on link    331            on link    281            on link    291            on link    257            on link    331            on link    281            on link    291            on link    257

Permanent       1       1       1

I can't remove routes 10.* as it's added by Cisco VPN client.
How to add route so I can ping,,,

  • The routes appear to already be there. But, it appears your Cisco VPN client has probably taken over. It is dictated by VPN policy. If it's configured to not allow split tunneling you may have trouble. What happens if you disconnect the Cisco VPN then try to ping these endpoints? Nov 9 '17 at 3:47
  • If I disconnect VPN, sure it's working fine.
    – Leon Zeng
    Nov 9 '17 at 4:09
  • Unfortunately Cisco AnyConnect is not just a vpn client it is also a security product. If there is anything you can change it will be in the vpn settings, but whatever is dictated by policy can’t be changed. Your organization is blocking split tunneling for security reasons. Nov 9 '17 at 4:22
  • Look for a setting in the client called "split tunneling". otherwise, the vNic will send all traffic through the VPN. your organization may or may not allow you to modify this. Nov 9 '17 at 5:11
  • @FrankThomas there is also a setting called Local LAN Access that impacts this. Nov 9 '17 at 5:30

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.