Hi.
On Sat, Oct 25, 2014 at 3:24 PM, Gert Doering <[email protected]> wrote:
>
> Hi,
>
> On Sat, Oct 25, 2014 at 03:12:18PM -0400, Jonathan K. Bullard wrote:
> > On my client, "--redirect-gateway def1" adds a pair of IPv4 routes that
> > direct all IPv4 addresses to the VPN.
> >
> > If a program sends packets to an IPv6 address in that situation, will the
> > IPv6 traffic sent to the VPN? If not, is there a way to force that?
>
> No. To get IPv6 into the VPN, you need a few things
>
> On the server:
>
> --server-ipv6 $address/bits <- turn on IPv6, define transit network
> push "ifconfig-ipv6" to client
>
> On the client:
>
> --tun-ipv6
> --route-ipv6 $prefix/bits
> --route-ipv6 ::/0 <- default route equivalent
>
> of course, all those can be pushed.
>
> IPv6 is really independent from IPv4 here - you can redirect one or the
> other, or both.
>
> Functionality that is lacking in 2.3 but need to be in 2.4: if you connect
> via IPv6 transport to a server, and that server redirects the IPv6 default
> route (like, "redirect-gateway def1" for IPv6), it will fail, because the
> code doesn't understand how to setup a static host route for the VPN server
> yet - so it ends up routing recursively.
>
> So, as of today, if you want to redirect the IPv6 default route, you need
> to connect over IPv4.
Thanks for your answer. Sorry to be so dense, but if I understand you
correctly, the description of "--redirect-gateway" on the 2.3 man page:
"Automatically execute routing commands to cause all outgoing IP
traffic to be redirected over the VPN. This is a client-side option."
is incorrect when the VPN configurations (server and client) don't
specifically "enable" IPv6? That is, IPv4 traffic is redirected over the
VPN but IPv6 traffic is **not** redirected?
So a more accurate description of "--redirect-gateway" would be:
"Automatically execute routing commands to cause all outgoing
IPv4 traffic to be redirected over the VPN. This is a client-side
option."
------------------------------------------------------------------------------
_______________________________________________
Openvpn-users mailing list
[email protected]
https://lists.sourceforge.net/lists/listinfo/openvpn-users
