On 05/01/2016 02:35 AM, Olivier Mascia wrote:
>> Le 1 mai 2016 à 04:26, Jim Pingle <[email protected]> a écrit :
>>
>> On 4/30/2016 6:57 AM, Olivier Mascia wrote:
>>> Sorry for having asked this question.
>>> While I had tried to find the answer before posting, I finally found the 
>>> answer seconds later.
>>>
>>> https://doc.pfsense.org/index.php/IPv6_and_VPNs
>>>
>>> "Currently IPv6 with IPsec is functional, but traffic cannot be mixed 
>>> families in a tunnel. Meaning, IPv6 traffic can only be carried inside a 
>>> tunnel which has IPv6 endpoints, and IPv4 traffic can only be carried over 
>>> a tunnel using IPv4 endpoints. A single tunnel cannot carry both types of 
>>> traffic."
>> That page is a little out of date in one respect: You can't mix traffic
>> with IPsec using IKEv1, but you can with IKEv2. So long as both sides
>> support IKEv2 you can carry IPv6 and IPv4 in P2 entries.
>>
>> FWIW, You can also tunnel both at once using OpenVPN.
> I have had a performance issue with OpenVPN recently (though I used OpenVPN a 
> lot in the past for remote access VPN and some point to point link over slow 
> links). I started using IPsec for those two new links with higher performance 
> and the results are excellent. Indeed I configured IKEv2 on both endpoints. 
> So I should push the experience of adding a second phase2 for tunneling IPv6.
>
> Thanks !
>
What kind of performance issues?  Highspeed links?  Just wondering.

_______________________________________________
pfSense mailing list
https://lists.pfsense.org/mailman/listinfo/list
Support the project with Gold! https://pfsense.org/gold

Reply via email to