Blog

VPN split routing on a shared dorm network: fix it

Check whether browser traffic bypasses your VPN on dorm Wi-Fi, then review split tunneling, leak protection, and campus network settings.

Ryan MitchellHardware tests Tests 5 min read

Your VPN says it is connected, but some websites or apps still seem to use the dorm network directly. This can happen when split tunneling is enabled, a browser is excluded from the VPN, or the campus network needs a separate sign-in.

Start by checking what a website can see while the VPN is on. The VPN Leak Test checks whether your real IP address leaks through IPv6 or WebRTC. It can help narrow down the problem, but it cannot inspect every app or prove that all device traffic uses the VPN.

Check for a leak while the VPN is connected

  1. Connect to the dorm Wi-Fi and sign in to any campus network portal as required. Then connect your VPN using the profile you normally use on campus.
  2. Open the VPN Leak Test in the browser you are troubleshooting. Keep the VPN connected while the check runs.
  3. Review the results for an address associated with your regular internet connection, rather than the VPN. The test checks possible IPv6 and WebRTC leaks.
  4. For comparison, disconnect the VPN and run the check again. Note which address appears, then reconnect the VPN before using other sites.
  5. If the VPN app has an option to route all traffic, check that setting and repeat the test. Avoid changing campus network settings you do not control.

Use the same browser and network for both runs. If your VPN uses different servers or profiles, test the profile you normally rely on. A changing VPN server address can be normal, so focus on whether the results expose your regular connection instead.

What the result means

The VPN is connected and the test does not show your regular IP

The browser test did not find a real IP leak through the routes it checks. That is a useful sign, but it does not confirm that other apps, background services, or every website connection are going through the VPN. Split tunneling can still send selected apps outside the tunnel.

Your regular public IP appears while the VPN is on

The browser may be reaching the internet outside the VPN, or the VPN may not be handling IPv6 or WebRTC traffic as expected. Check whether the browser is excluded from the VPN and whether the app provides leak protection. If the result keeps appearing, contact the VPN provider or campus IT with the test details.

The result includes a private network address

A local address, such as one used on your dorm network, is not the same as your public IP address. WebRTC can expose local network information to a page without proving that ordinary internet traffic bypassed the VPN. Treat the result as a privacy clue, not proof that all traffic is unprotected.

The test changes between runs

A temporary change can come from reconnecting the VPN, switching servers, or a network interruption. Repeat the test once with the same VPN profile and browser. If your regular public IP appears repeatedly only while the VPN claims to be connected, investigate the VPN settings.

How to fix unexpected split routing

  1. Reconnect the VPN. Disconnect and reconnect using the VPN app, then rerun the test. Confirm that the app itself reports an active connection, not just that the Wi-Fi icon shows a connection.
  2. Review split-tunnel exclusions. In the VPN app, look for split tunneling, excluded apps, or an option to route all traffic through the VPN. Remove the browser from any bypass list, or select full-tunnel routing if that is available and allowed by your organization.
  3. Check leak protection. Look in the VPN app for IPv6 leak protection, DNS protection, or a network lock option. The exact names vary. If the app offers separate IPv6 handling, follow its instructions rather than turning off IPv6 across the computer as a guess.
  4. Complete the campus sign-in first. Some dorm networks require a browser portal, device registration, or an accepted network policy before internet access works. Follow the school’s instructions, then reconnect the VPN. Do not share your account details with anyone helping you troubleshoot.
  5. Review the device VPN connection. On Windows 11, open Settings › Network & internet › VPN to see whether a VPN connection is configured there. On macOS, open System Settings › VPN. If you use a VPN app, its own connection profile may control routing instead, so check the app before editing a system profile.
  6. Check a phone’s VPN settings if needed. On Android, go to Settings › Network & internet › VPN. On iPhone, go to Settings › General › VPN & Device Management › VPN. Look for an active profile or an app setting that excludes specific traffic. Menu names can differ by device and software version.
  7. Compare on another network. If permitted, test the same VPN and browser on a trusted home network or personal hotspot. If the leak appears only on dorm Wi-Fi, the campus network may be restricting or changing VPN traffic. Ask campus IT whether personal VPN use is supported on that network.

Do not install another person’s VPN profile or change a managed device’s routing rules without permission. On a shared dorm network, the school controls the access point and may require settings that students cannot change.

What the browser test cannot confirm

A leak test looks at what the browser can reveal through specific network features. It does not inspect the routing table for every program, test every connection protocol, or guarantee that a VPN provider handles traffic correctly. A browser extension may also protect only browser traffic, while a full VPN app can route traffic from other applications.

If the test looks clear but one app still connects outside the VPN, check that app’s routing rules in the VPN software. If the browser exposes your regular IP repeatedly, save the result details and contact the VPN provider or campus IT for help.

More articles