Is there a way to configure openvpn to only configure an ipv6 address on a 
client's tunnel interface?

I want to be able to setup clients in *any* network without the risk of the 
ipv4 vpn network being the same as the local network.  I have an ipv6 tunnel 
setup and functional, but I can't figure out how to NOT have openvpn assign an 
ipv4 address to the client interface.

I have searched for a solution without any luck and posted to the openvpn forum 
and have not gotten any responses.

Any help/insight would be much appreciated!

Relevant server config settings
--------------------------------------------
server 10.25.0.0 255.255.0.0
server-ipv6 xxxx:yyyy:zzzz::/64
tun-ipv6
push tun-ipv6
ifconfig-ipv6 xxxx:yyyy:zzzz::1 xxxx:yyy:zzzz::2

Client ccd file
---------------------
ifconfig-ipv6-push xxxx:yyyy:zzzz::3 xxxx:yyyy:zzzz:4

Resulting client interface
------------------------------------
tun0      Link encap:UNSPEC  HWaddr 
00-00-00-00-00-00-00-00-00-00-00-00-00-00-00-00  
          inet addr:10.25.0.6  P-t-P:10.25.0.5  Mask:255.255.255.255
          inet6 addr: xxxx:yyyy:zzzz::3/64 Scope:Global
          UP POINTOPOINT RUNNING NOARP MULTICAST  MTU:1500  Metric:1
          RX packets:39 errors:0 dropped:0 overruns:0 frame:0
          TX packets:49 errors:0 dropped:0 overruns:0 carrier:0
          collisions:0 txqueuelen:100 
          RX bytes:6141 (5.9 KiB)  TX bytes:6277 (6.1 KiB)

Everything seems to be working, but I don't want the 10.25.0.6 address assigned 
to the client interface.

------------------------------------------------------------------------------
Learn Graph Databases - Download FREE O'Reilly Book
"Graph Databases" is the definitive new guide to graph databases and their
applications. Written by three acclaimed leaders in the field,
this first edition is now available. Download your free book today!
http://p.sf.net/sfu/13534_NeoTech
_______________________________________________
Openvpn-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-users

Reply via email to