Hi community,
I have set up my first OpenVPN Server a few day ago. All is working great on my linux machines. But there is a problem with my Windows 8.1 Client.
First my Setup and my goal:
I have:
1 server in datecenter (the openvpn server)
1 server at home
some clients (most of them are linux, some Windows)
My ISP provides me a IPv6 /64 subnet.
I wan't to use this on the road and at home.
So I had made 2 subnets with prefix length /112.
The Problem is the following:
When I connect with my Windows Client it allways gets a /64 prefix. So I cannot acces my home network or the public IP of my sever because the client thinks it must be connected directly. On Linux it is working perfectly with the same configuration file.
Here are my configuration files (the IP's are anonymised):
server.conf
port 443
proto tcp
dev tun
tun-ipv6
push tun-ipv6
ca easy-rsa/keys/ca.crt
cert easy-rsa/keys/vpn.kraus.moe.crt
key easy-rsa/keys/vpn.kraus.moe.key # This file should be kept secret
dh easy-rsa/keys/dh1024.pem
server 10.10.22.0 255.255.255.0
server-ipv6 2a01::1:0/112
ifconfig-ipv6 2a01::1:1/112 2a01::1:2
ifconfig-pool-persist ipp.txt
push "route-ipv6 ::/0"
client-config-dir ccd
route 10.10.11.0 255.255.255.0
route-ipv6 2a01::2:0/112 2a01::1:100
client-config-dir ccd
route 10.10.22.10 255.255.255.252
push "dhcp-option DNS 10.10.22.1"
push "dhcp-option DNS 8.8.8.8"
client-to-client
duplicate-cn
keepalive 10 120
comp-lzo
user nobody
group nogroup
persist-key
persist-tun
status openvpn-status.log
verb 4
client.conf/client.ovpn
client
dev tun
proto tcp
remote vpn.example.com 443
resolv-retry infinite
nobind
persist-key
persist-tun
ca ./config/ca.crt
cert ./config/client1.crt
key ./config/client1.key
ns-cert-type server
comp-lzo
verb 3
redirect-gateway def1
And this is what my clients geht while connecting:
Linux
ovpn-client[24907]: /sbin/ip -6 addr add 2a01::1:1000/112 dev tun0
Windows
NETSH: C:\WINDOWS\system32\netsh.exe interface ipv6 set address Ethernet 2a01:4a0:2001:2074::1:1001 store=active
I hope you can help me.
Thanks in advance!
Jan
