VPN Not Working on Linux Mint — What Could Be Wrong?
VPN connectivity problems on Linux Mint fall into a few categories: the VPN fails to connect at all, it connects but all internet traffic stops, DNS leaks (your ISP's DNS is used even when connected), or the VPN drops after a few minutes. This guide covers both OpenVPN and WireGuard configurations using NetworkManager (the standard GUI method) and the command line.
Step 1 — Install the Required VPN Plugins
NetworkManager needs specific plugins to handle OpenVPN and WireGuard connections. They are not installed by default on all Linux Mint editions:
# For OpenVPN
sudo apt update && sudo apt install network-manager-openvpn network-manager-openvpn-gnome
# For WireGuard
sudo apt install wireguard wireguard-tools network-manager-wireguard
After installing, restart NetworkManager:
sudo systemctl restart NetworkManager
Fix 1 — Re-import Your VPN Config File
Corrupted or incorrectly imported config files are the most common cause of connection failures:
- Open Network Connections (right-click network tray icon - Edit Connections)
- Delete the existing VPN entry
- Click the + button to add a new connection
- Choose Import a saved VPN configuration
- Browse to your
.ovpnor.conffile and import it - Enter your credentials if prompted and save
After re-importing, try connecting again.
Fix 2 — OpenVPN: Check Authentication Method
If OpenVPN repeatedly prompts for a password even when one is saved, or authentication fails silently:
- Open the VPN connection properties in Network Connections
- Go to the VPN tab and click Advanced
- Ensure Use LZO data compression matches your server's config
- Check that the authentication method (password, certificate, or both) matches what your VPN provider uses
Some providers require inline certificate authentication. Verify your .ovpn file contains <ca>...</ca>, <cert>...</cert> and <key>...</key> blocks.
Fix 3 — OpenVPN via Command Line
If NetworkManager GUI doesn't work, use the command line directly — it bypasses the GUI entirely and shows live error output:
sudo openvpn --config /path/to/your/config.ovpn
Watch the output for error lines. Common issues and what they mean:
- TLS handshake failed — certificate mismatch or server unreachable on that port
- AUTH_FAILED — wrong username or password
- Cannot open TUN/TAP device — TUN kernel module not loaded: run
sudo modprobe tun
Fix 4 — WireGuard: No Internet After Connecting
The most common WireGuard problem on Linux Mint: VPN connects successfully but all internet stops. This is a routing or DNS issue in the config:
Check your AllowedIPs setting:
Open your .conf file and look at the Peer section:
[Peer]
AllowedIPs = 0.0.0.0/0
This routes ALL traffic through the VPN. If your VPN server is unreachable or misconfigured, all traffic fails. For split tunneling (only route VPN traffic):
AllowedIPs = 10.0.0.0/8, 192.168.0.0/16
Fix DNS leaks in WireGuard:
Add a DNS line to your Interface section:
[Interface]
DNS = 1.1.1.1
Then restart the WireGuard connection.
Fix 5 — WireGuard via Command Line
# Bring up a WireGuard connection from config file
sudo wg-quick up /etc/wireguard/wg0.conf
# Check connection status
sudo wg show
# Bring it down
sudo wg-quick down wg0
If you get Cannot open wireguard device, the WireGuard kernel module needs loading:
sudo modprobe wireguard
Fix 6 — Fix DNS Leaks on Any VPN
Even when connected, your DNS queries may bypass the VPN if resolvconf is not configured correctly:
# Install resolvconf
sudo apt install resolvconf
# Check current DNS servers in use
cat /etc/resolv.conf
For OpenVPN, add this line to your .ovpn file to push DNS updates:
script-security 2
up /etc/openvpn/update-resolv-conf
down /etc/openvpn/update-resolv-conf
Fix 7 — VPN Disconnects After a Few Minutes
If the VPN connects but drops after 2–10 minutes, the issue is usually keepalive settings or a firewall timeout:
OpenVPN: Add to your .ovpn:
keepalive 10 60
WireGuard: Add to your [Peer] section:
PersistentKeepalive = 25
This sends a keepalive packet every 25 seconds to prevent NAT/firewall timeout.
Fix 8 — Check Firewall Rules (UFW)
If UFW is enabled, it may block VPN traffic on the TUN interface:
# Allow TUN traffic
sudo ufw allow in on tun0
sudo ufw allow out on tun0
# For WireGuard
sudo ufw allow in on wg0
sudo ufw allow out on wg0
If VPN issues started after enabling UFW, try sudo ufw disable temporarily to confirm.
If you need more advanced VPN or networking help on Linux Mint, CloudHouse remote support can diagnose your specific configuration.
FAQ
Why does my OpenVPN connect but then the internet stops working?
This is a DNS or routing problem. After connecting, OpenVPN pushes new routes but if DNS update scripts are not configured, your DNS still points to your local router. Install resolvconf and add the up/down DNS update scripts to your .ovpn file (Fix 6).
WireGuard says handshake did not complete — what does that mean?
This means the WireGuard client sent packets but got no reply from the server. Causes: wrong server IP or port in the config, UDP blocked by your network firewall (try a different network), or the server is down. Check your Endpoint setting in the .conf file.
Can I use a commercial VPN (NordVPN, ExpressVPN, etc.) on Linux Mint?
Yes. Most commercial VPN providers offer a Linux CLI client or OpenVPN/WireGuard config files for download. Use their official config files with the NetworkManager import method (Fix 1) for the most reliable setup.
How do I check if my VPN is actually working after connecting?
Run in Terminal: curl ifconfig.me. This returns your current public IP. If it matches your VPN server's IP (not your ISP's IP), the VPN is routing traffic correctly. Also check: sudo wg show (WireGuard) or check the OpenVPN log output for active tunnel confirmation.
Does Linux Mint come with a built-in VPN?
Linux Mint includes NetworkManager with VPN support, but the OpenVPN and WireGuard plugins are separate packages. Install them with: sudo apt install network-manager-openvpn wireguard (Fix Step 1 in this guide).
