A network-online target is reached and one VPN-dependent service still fails

The link is up, yet the route semantics the service depends on arrive later than the generic connectivity signal.