I was thrilled when the AS added IPv6 support in the 2.x release, but I've not had time to look into configuring it until now. Alas, despite my best searching, I've not found documentation on how to configure it on the AS (as opposed to the community daemon).
So, I decided to just give it a try without guidance. So, I allocated a new /64 for the purpose, and set a static in my upstream router for that block to point to the IPv6 address of the AS. I then tried to do the most basic configuration on the AS by adding "server-ipv6 2001:xxxx::/64" (obviously, with the real /64) to the "Server Config Directives" in the Advanced VPN tab.
Unfortunately, once I saved and restarted the server, the entire web server refused to come back up, and I was forced to use
sacli --key "vpn.server.config_text" ConfigDel
to get rid of it to get back to a working (IPv4-only) state. I then checked the logs and found the following error was being thrown.
2014-04-11 07:35:57-0700 [-] Server Agent initialization status: {'errors': {'openvpn_0': [('error', "process started and then immediately exited: ['Options error: --server-ipv6 must be used together with --server']"), ('error', 'service failed to start or returned error status')], 'openvpn_1': [('error', "process started and then immediately exited: ['Options error: --server-ipv6 must be used together with --server']"), ('error', 'service failed to start or returned error status')]}, 'service_status': {'bridge': 'started', 'log': 'started', 'license': 'started', 'iptables_web': 'started', 'iptables_openvpn': 'started', 'ip6tables_openvpn': 'started', 'openvpn_1': 'off', 'auth': 'started', 'ip6tables_live': 'started', 'client_query': 'started', 'api': 'started', 'openvpn_0': 'off', 'web': 'started', 'db_push': 'started', 'iptables_live': 'started', 'crl': 'started', 'user': 'started'}}
So it looks like I need to add the server directive, but I would have guessed that the IPv4 side of things would have already added that to the virtual config. Before I go hunting much further, I thought I'd ask a few questions here:
- Is there documentation somewhere on how to do this on the Access Server?
- Is there a way to dump the AS server's config in non JSON format (i.e., old config file format)?
- If not, is there a way to get a list of all the possible JSON keys (in hopes there are some v6 ones!)
Many thanks to anyone who might be able to provide clue here!
- Jim
