I use Tomato v1.28 (MIPSR2-140 K26AC USB AIO-64K) on a Netgear WNDR4500 V1. I have internet service from Xfinity, and IPv6 from Hurricane Electric (both a /64 and a /48). I assigned the /48 to the LAN using the Tomato GUI. IPv6 works, test-ipv6.com returns 10/10.
I put the details from my /64 prefix into the OpenVPN configuration following
https://community.openvpn.net/openvpn/wiki/IPv6.
I can connect from a client to the OpenVPN server over IPv6, and the client gets a v6 address that's in the /64 prefix. However, the client has no IPv6 connectivity at all. I've tried this with multiple clients (Tunnelblick/macOS, OpenVPN for Android, OpenVPN Connect/iOS). test-ipv6.com says "No IPv6 address detected". All the ipv6 related tests are timing out.
I've substituted the IPv6 prefixes below:
- 2001:db8:8:3b3::/64 is the /64 assigned to OpenVPN
- 2001:db8:e1ca::/48 is the /48 assigned to the LAN interface
# Automatically generated configuration
daemon
server 192.168.2.0 255.255.255.0
proto udp
port 1194
dev tun21
cipher AES-256-CBC
comp-lzo adaptive
keepalive 15 60
verb 3
push "route 192.168.1.0 255.255.255.0"
client-config-dir ccd
client-to-client
push "dhcp-option DNS 192.168.1.1"
push "redirect-gateway def1"
tls-auth static.key 0
ca ca.crt
dh dh.pem
cert server.crt
key server.key
status-version 2
status status
# Custom Configuration
auth sha256
verb 5
proto udp6
server-ipv6 2001:db8:8:3b3::/64
push "route-ipv6 2001:db8:e1ca::/48"
push "redirect-gateway ipv6"
client
dev tun
proto udp6
remote vpn.server.com 1194
nobind
persist-key
persist-tun
remote-cert-tls server
key-direction 1
cipher AES-256-CBC
auth sha256
compress lzo
float
<ca>
[Security-related line(s) omitted]
</ca>
<cert>
[Security-related line(s) omitted]
</cert>
<key>
[Security-related line(s) omitted]
</key>
<tls-auth>
[Security-related line(s) omitted]
</tls-auth>
OpenVPN log:
https://gist.github.com/abraha2d/f339ff163dd93e20ba3b499c69d6abe3
