SRT75
Hi All,
I'm trying to add IPV6 to my existing IPV4 config, but I'm having problems getting it to work.
My Windows client receives a IPV6 address, though I cannot access site like "ipv6.google.com", it just times out, the same for when pinging as well, though it does retrieve the corrupt ipv6 address.
I've also tried all the following, but with no joy :-
iptables6 -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
/sbin/ip -6 neigh add proxy 2001:41d0:xxxx:xxxx:abcd::1 dev eth0
ip6tables -A FORWARD -s 2001:41d0:xxxx:xxxx:abcd::1/64 -i tun0 -o eth0 -j ACCEPT
ip6tables -A INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
ip6tables -A FORWARD -s 2001:41d0:xxxx:xxxx:abcd::/64 -j ACCEPT
ip6tables -A FORWARD -s 2001:41d0:xxxx:xxxx:abcd::/64 -i tun0 -o eth0 -j ACCEPT
ip -6 route add 2001:41d0:xxxx:xxxx:abcd::/64 dev tun0
Clearly I'm doing something wrong, can someone point me in the right direction please?
BTW VPN over IPV4 works fine.
Local Machine:
Windows 8.1 x64
OpenVPN openvpn-install-2.3.2-I002-x86_64
Remote Server Info:
Debian 6 (Squeeze 64Bit)
OpenVPN 2.3.2
IPV4 - 178.32.xxx.154
IPV6 - 2001:41d0:xxxx:xxxx::1/64
[Server.conf]
port 1194
proto udp
dev tun
tun-ipv6
ca /etc/openvpn/ca.crt
cert /etc/openvpn/server.crt
key /etc/openvpn/server.key
dh /etc/openvpn/dh1024.pem
server 10.8.0.0 255.255.255.0
server-ipv6 2001:411d0:xxxx:xxxx:abcd::/112
ifconfig-pool-persist ipp.txt
push "redirect-gateway def1"
push "redirect-gateway-ipv6 def1"
push "dhcp-option DNS 213.186.xxx.xxx"
push "route 178.xxx.xxx.0 255.255.255.0"
push "route-ipv6 2001:41d0:xxxx:xxxx::1/64"
push "route-ipv6 2000::/3"
keepalive 10 120
cipher AES-128-CBC
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
verb 3
[Client]
client
dev tun
tun-ipv6
proto udp
remote 178.32.xxx.154 1194
pull
route 178.32.xxx.154 255.255.255.255 net_gateway
resolv-retry infinite
nobind
persist-key
persist-tun
script-security 3
ca ca.crt
cert client_ovh.crt
key client_ovh.key
cipher AES-128-CBC
comp-lzo
verb 3
[sysctl.conf]
net.ipv4.ip_forward=1
net.ipv6.conf.all.forwarding=1
net.ipv6.conf.eth0.proxy_ndp=1
net.ipv6.conf.all.autoconf = 0
net.ipv6.conf.default.autoconf = 0
net.ipv6.conf.eth0.autoconf = 0
net.ipv6.conf.all.accept_ra = 0
net.ipv6.conf.default.accept_ra = 0
net.ipv6.conf.eth0.accept_ra = 0
