Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

When I start a VPN connection, a new default route is added on the utun0 interface:

Destination        Gateway            Flags        Refs      Use   Netif Expire
default            utun0              UCS            21        0   utun0
default         UGScI          14        0     en1

I'd like to get rid of the default/utun0 route. When using route with the -ifscope modifier, I get the following error:

$ sudo route delete -ifscope utun0 -net
route: writing to routing socket: not in table
delete net not in table

What am I doing wrong? What's the correct syntax of the route command in order to delete the default route?

share|improve this question
Before doing this. Keep in mind that it is a dangerous command if you are accessing your server online ! ;) –  eVoxmusic May 16 '12 at 11:40
Telling the VPN clinet not to create the route sounds a lot cleaner to me. The native pptp client can be configured like this. Are you using a different client? –  Nitz Aug 13 at 8:04

4 Answers 4

Not in front of a Mac right now, off the top of my head try;

sudo route del default dev utun0
share|improve this answer
Sorry, but it's not working. I tried also with sudo route delete default -ifscope utun0, but still without success –  mgryszko May 16 '12 at 12:06

You can try this:

sudo route delete -net default utun0
share|improve this answer
$ sudo route delete -net -ifp ppp0
delete net

This is documented in route(8)

share|improve this answer

I know it's late, but I'd like to know what kind of VPN you're using.

I've had this problem with Cisco Anyconnect VPN.

Not seeing the same error as you, but the command would appear to execute, but the routing table would still look the same.

I believe Cisco AnyConnect locks the routing table in some way so that it cannot be modified.

If this isn't Cisco AnyConnect, it may do something similar. I haven't found any documentation on it, but that's the conclusion I've come to from my testing.

I've found this also appears to apply on Windows.

Cheers, Aaron

share|improve this answer
It's Cisco. Our network topology changed, so I cannot verify the answers. –  mgryszko Nov 12 at 7:12

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.