server-ipv6 settings: only /64../112 supported right now (not /125)
Posted: Sun Jun 25, 2017 11:58 am
I am trying to add IPv6 to my OpenVPN server which is based on Digitalocean's droplet (VPS) with Ubuntu 17.04 (IPv4 tunnels work fine).
Digitalocean assigns to a VPS only 16 IPv6 addresses from a /64 subnet (which is basically only an /124 network my server can use. All other IPs are allocated to other VPSes of other customers). The quote from Digitalocean's control panel:
Digitalocean does not provide additional IPv6 blocks to VPSes, so I split my small /124 subnet into 2 /125s (first one for my server and the next one for OpenVPN's clients) and setup OpenVPN as follows:
[oconf]
# ipv6
server-ipv6 2a03:b0c0:2:d0::XXXX:X009/125
tun-ipv6
push tun-ipv6
ifconfig-ipv6 2a03:b0c0:2:d0::XXXX:X009 2a03:b0c0:2:d0::XXXX:X010
push "route-ipv6 2000::/3"
;redirect-gateway ipv6
[/oconf]
Only to get this error:
Any ideas why legal small subnets are not supported or what I am doing wrong?
Digitalocean assigns to a VPS only 16 IPv6 addresses from a /64 subnet (which is basically only an /124 network my server can use. All other IPs are allocated to other VPSes of other customers). The quote from Digitalocean's control panel:
Code: Select all
PUBLIC IPV6 ADDRESS:
2a03:b0c0:2:d0::XXXX:X001
PUBLIC IPV6 GATEWAY:
2a03:b0c0:2:d0::1
CONFIGURABLE ADDRESS RANGE:
2a03:b0c0:2:d0::XXXX:X000 - 2a03:b0c0:2:d0::XXXX:X00f
[oconf]
# ipv6
server-ipv6 2a03:b0c0:2:d0::XXXX:X009/125
tun-ipv6
push tun-ipv6
ifconfig-ipv6 2a03:b0c0:2:d0::XXXX:X009 2a03:b0c0:2:d0::XXXX:X010
push "route-ipv6 2000::/3"
;redirect-gateway ipv6
[/oconf]
Only to get this error:
Code: Select all
Options error: --server-ipv6 settings: only /64../112 supported right now (not /125)