jbertrand
Hello,
I have installed a long time ago an IPv4 OpenVPN tunnel between two servers. First one runs Debian/Linux (amd64) and operates as OpenVPN server. Second one acts as a client and is running NetBSD 7.99.21 (sparc64).
Server conf (OpenVPN 2.3.7-2):
local 192.168.253.1
mode server
port 1194
fragment 1416
mssfix 1416
proto udp
link-mtu 1492
dev tap1
tls-server
ca /etc/openvpn/easy-rsa/2.0/keys/ca.crt
cert /etc/openvpn/easy-rsa/2.0/keys/rayleigh.crt
key /etc/openvpn/easy-rsa/2.0/keys/rayleigh.key
dh /etc/openvpn/easy-rsa/2.0/keys/dh1024.pem
server 192.168.1.0 255.255.255.0
ifconfig 192.168.1.1 255.255.255.0
keepalive 10 120
comp-lzo
max-clients 5
#user nobody
group nogroup
persist-key
persist-tun
status openvpn-status-udp.log
verb 3
script-security 2
up /etc/openvpn/route-udp-up.sh
down /etc/openvpn/route-udp-down.sh
client-config-dir /etc/openvpn/ccd
nice -10
Client conf (openvpn-2.3.6nb2)
rport 1194
lport 10240
proto udp
fragment 1416
mssfix 1416
link-mtu 1492
dev tap
remote 213.41.149.211
float
client
tls-client
remote-cert-tls server
ca /usr/pkg/etc/openvpn/keys/ca.crt
cert /usr/pkg/etc/openvpn/keys/vignols.crt
key /usr/pkg/etc/openvpn/keys/vignols.key
comp-lzo adaptive
verb 3
ping 10
script-security 2
up /usr/pkg/etc/openvpn/route-up.sh
down /usr/pkg/etc/openvpn/route-down.sh
nice -20
All scripts called by these configurations add and delete routes.
This OpenVPN link works fine in IPv4 but doesn't in IPv6.
Network tolopogy :
VDSL2 (IPV4/6) --------- Linux router ------ LAN0
ADSL2+ (IPV4) ------------------+
|
openvpn
|
WIMAX (IPV4) ------------ NetBSD router ----- LAN1/2
From LAN0, IPv6 run without trouble. But from LAN1 or LAN2, IPv6 is only available when a workstation from LAN0 tries to use IPv6 network. I only use static addresses for both IPv4 and 6. I have removed IPv6 firewall.
When a workstation from LAN1 or LAN2 tries to acces to IPv6 network, sometimes it can access to IPv6 network. Sometimes it cannot as network is unreachable. But when IPv6 network is unreachable from LAN1, Linux router (openvpn server) is always 'pingable' in IPv6. I suppose some IPv6 signalization is missing somewhere... Any idea ?
Best regards,
JB
jbertrand
Yes, I try. Packets are always reveived by OpenVPN server, but this server only randomly routes these packets. Of course, all IPv6 packets are sent over OpenVPN (WIMAX access doesn't provide IPv6 connectivity).
