Hi, On Sat, Oct 25, 2014 at 03:12:18PM -0400, Jonathan K. Bullard wrote: > On my client, "--redirect-gateway def1" adds a pair of IPv4 routes that > direct all IPv4 addresses to the VPN. > > If a program sends packets to an IPv6 address in that situation, will the > IPv6 traffic sent to the VPN? If not, is there a way to force that?
No. To get IPv6 into the VPN, you need a few things
On the server:
--server-ipv6 $address/bits <- turn on IPv6, define transit network
push "ifconfig-ipv6" to client
On the client:
--tun-ipv6
--route-ipv6 $prefix/bits
--route-ipv6 ::/0 <- default route equivalent
of course, all those can be pushed.
IPv6 is really independent from IPv4 here - you can redirect one or the
other, or both.
Functionality that is lacking in 2.3 but need to be in 2.4: if you connect
via IPv6 transport to a server, and that server redirects the IPv6 default
route (like, "redirect-gateway def1" for IPv6), it will fail, because the
code doesn't understand how to setup a static host route for the VPN server
yet - so it ends up routing recursively.
So, as of today, if you want to redirect the IPv6 default route, you need
to connect over IPv4.
gert
--
USENET is *not* the non-clickable part of WWW!
//www.muc.de/~gert/
Gert Doering - Munich, Germany [email protected]
fax: +49-89-35655025 [email protected]
pgp8qo4XulZ67.pgp
Description: PGP signature
------------------------------------------------------------------------------
_______________________________________________ Openvpn-users mailing list [email protected] https://lists.sourceforge.net/lists/listinfo/openvpn-users
