When I connect to a VPN with Mac VIA client, I get an ip address from the company network, say 192.168.123.0/24. Right after connecting, I am able to connect to all hosts in that network, but not to any other private networks and not to the outside world.
After the VPN connection has been open exactly two minutes, all connections start working. It seems like the VPN server's routing table would only accept me properly after that, which seems quite strange.
Sometimes I don't get this "two-minute penalty". I'm not sure what the conditions are, but I think the penalty occurs every time after rebooting.
All of our few Mac users have had this problem for years, spanning multiple VIA versions, OS versions and MBP/MBA models. Windows users connecting to the same network don't have this problem.
I have compared `netstat -r` and `ifconfig` output before and after the two-minute boundary to no avail, and I don't find anything related to this in `/var/log` - especially: nothing is written to any log file on the two-minute boundary.
This happens both with using the VIA client and with the `scutil` command line utility.
Any ideas about the reason, or how to debug this further?