And before you submit your logs at "verb 4" , some suggested changes to your config:
If you are running with 2.4.x for clients and servers and still trying to do dual stack service woth IPv4 and IPv6 over the same tunnel, try changing:
push "redirect-gateway def1 bypass-dhcp"
to
push "redirect-gateway ipv6 def1 bypass-dhcp"
The "redirect-gateway" option "ipv6" and above should include routing rules for IPv6 making this line redundant:
push "route-ipv6 2000::/3"
So, pushing that route may not be needed. Try commenting it out, reloading server config, and then look at the client logs and routes they establish with the above "ipv6" addition to "redirect-gateway"
And, as for:
push "dhcp-option DNS 8.8.8.8 8.8.4.4"
Change to:
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
Why one on each line?
From the Man Page (2.4.x) :
--dhcp-option type [parm]
[chop]
DNS addr -- Set primary domain name server IPv4 address. Repeat
this option to set secondary DNS server addresses.
DNS6 addr -- Set primary domain name server IPv6 address.
Repeat this option to set secondary DNS server IPv6 addresses.
[chop]
So, if you have IPv6 DNS, then you can use "DNS6" for those IP addresses.
(The DNS6 may be new to 2.4.x and not be in 2.3.x clients/servers.)
Again, the description says "repeat this option to set secondary DNS servers" meaning, one per "line" not all in one.
Having them run one per line is much closer to the way DHCP options are passed. (Though, DHCP packets, they are not "per line" but per a protocol-established IFS, the net effect is nearly the same.)
Examples:
push "dhcp-option DNS 8.8.8.8"
push "dhcp-option DNS 8.8.4.4"
push "dhcp-option DNS6 2001:4860:4860::8888"
push "dhcp-option DNS6 2001:4860:4860::8844"
Having one per line provides a better chance for scripts that consume these options to process them one at a time instead of relying on side-effects and features that may not be available on all clients and their scripts for using these options.
If you are not using 2.4.x for clients and servers, then the only change I would suggest would be the separation of the dhcp-options for DNS to be one DNS Server per line, and not use the "DNS6" lines. If clients and servers are all on 2.4.x, then use both as needed..
