Hi everyone,
I made a virtual Openvpn server with remote host, but server has only IPV6 address (with hostname)
I followed some tutorials like this :
https://community.openvpn.net/openvpn/wiki/IPv6) to setup remote connectivity (ip6-table, add route and so on)
I successfully created it and access to the remote server and ping to the host, but client (windows 10) doesn't have internet access at all and i can't understand why!
Please is anyone could help me to understand ?
my openvpn client logs
Mon Dec 23 14:05:58 2019 OpenVPN 2.4.8 x86_64-w64-mingw32 [SSL (OpenSSL)] [LZO] [LZ4] [PKCS11] [AEAD] built on Oct 31 2019
Mon Dec 23 14:05:58 2019 Windows version 6.2 (Windows 8 or greater) 64bit
Mon Dec 23 14:05:58 2019 library versions: OpenSSL 1.1.0l 10 Sep 2019, LZO 2.10
Enter Management Password:
Mon Dec 23 14:05:58 2019 MANAGEMENT: TCP Socket listening on [AF_INET]127.0.0.1:25341
Mon Dec 23 14:05:58 2019 Need hold release from management interface, waiting...
Mon Dec 23 14:05:58 2019 MANAGEMENT: Client connected from [AF_INET]127.0.0.1:25341
Mon Dec 23 14:05:58 2019 MANAGEMENT: CMD 'state on'
Mon Dec 23 14:05:58 2019 MANAGEMENT: CMD 'log all on'
Mon Dec 23 14:05:58 2019 MANAGEMENT: CMD 'echo all on'
Mon Dec 23 14:05:58 2019 MANAGEMENT: CMD 'bytecount 5'
Mon Dec 23 14:05:58 2019 MANAGEMENT: CMD 'hold off'
Mon Dec 23 14:05:58 2019 MANAGEMENT: CMD 'hold release'
Mon Dec 23 14:05:58 2019 MANAGEMENT: CMD 'password [...]'
Mon Dec 23 14:05:59 2019 Outgoing Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
Mon Dec 23 14:05:59 2019 Outgoing Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
Mon Dec 23 14:05:59 2019 Incoming Control Channel Encryption: Cipher 'AES-256-CTR' initialized with 256 bit key
Mon Dec 23 14:05:59 2019 Incoming Control Channel Encryption: Using 256 bit message hash 'SHA256' for HMAC authentication
Mon Dec 23 14:05:59 2019 MANAGEMENT: >STATE:1577106359,RESOLVE,,,,,,
Mon Dec 23 14:05:59 2019 TCP/UDP: Preserving recently used remote address: [AF_INET6]2a00:c70:130:1::19:1194
Mon Dec 23 14:05:59 2019 Socket Buffers: R=[65536->65536] S=[65536->65536]
Mon Dec 23 14:05:59 2019 UDP link local: (not bound)
Mon Dec 23 14:05:59 2019 UDP link remote: [AF_INET6]2a00:c70:130:1::19:1194
Mon Dec 23 14:05:59 2019 MANAGEMENT: >STATE:1577106359,WAIT,,,,,,
Mon Dec 23 14:05:59 2019 MANAGEMENT: >STATE:1577106359,AUTH,,,,,,
Mon Dec 23 14:05:59 2019 TLS: Initial packet from [AF_INET6]2a00:c70:130:1::19:1194, sid=1e439d80 f7430a83
Mon Dec 23 14:05:59 2019 VERIFY OK: depth=1, CN=ChangeMe
Mon Dec 23 14:05:59 2019 VERIFY KU OK
Mon Dec 23 14:05:59 2019 Validating certificate extended key usage
Mon Dec 23 14:05:59 2019 ++ Certificate has EKU (str) TLS Web Server Authentication, expects TLS Web Server Authentication
Mon Dec 23 14:05:59 2019 VERIFY EKU OK
Mon Dec 23 14:05:59 2019 VERIFY X509NAME OK: CN=frhb35008ds_a75b2632-a9ab-4201-b385-7b7730d90bf9
Mon Dec 23 14:05:59 2019 VERIFY OK: depth=0, CN=frhb35008ds_a75b2632-a9ab-4201-b385-7b7730d90bf9
Mon Dec 23 14:05:59 2019 Control Channel: TLSv1.2, cipher TLSv1.2 ECDHE-ECDSA-AES256-GCM-SHA384, 256 bit EC, curve: prime256v1
Mon Dec 23 14:05:59 2019 [frhb35008ds_a75b2632-a9ab-4201-b385-7b7730d90bf9] Peer Connection Initiated with [AF_INET6]2a00:c70:130:1::19:1194
Mon Dec 23 14:06:00 2019 MANAGEMENT: >STATE:1577106360,GET_CONFIG,,,,,,
Mon Dec 23 14:06:00 2019 SENT CONTROL [frhb35008ds_a75b2632-a9ab-4201-b385-7b7730d90bf9]: 'PUSH_REQUEST' (status=1)
Mon Dec 23 14:06:00 2019 PUSH: Received control message: 'PUSH_REPLY,dhcp-option DNS 208.67.222.222,dhcp-option DNS 208.67.220.220,block-outside-dns,redirect-gateway def1,tun-ipv6,route-ipv6 2a00:c70:130:1::19/64,route-ipv6 2000::/3,tun-ipv6,route-gateway 10.8.0.1,topology subnet,ping 1800,ping-restart 3600,ifconfig-ipv6 2a00:c70:130:1::1019/64 2a00:c70:130:1::1a,ifconfig 10.8.0.2 255.255.255.0,peer-id 0,cipher AES-256-GCM'
Mon Dec 23 14:06:00 2019 OPTIONS IMPORT: timers and/or timeouts modified
Mon Dec 23 14:06:00 2019 OPTIONS IMPORT: --ifconfig/up options modified
Mon Dec 23 14:06:00 2019 OPTIONS IMPORT: route options modified
Mon Dec 23 14:06:00 2019 OPTIONS IMPORT: route-related options modified
Mon Dec 23 14:06:00 2019 OPTIONS IMPORT: --ip-win32 and/or --dhcp-option options modified
Mon Dec 23 14:06:00 2019 OPTIONS IMPORT: peer-id set
Mon Dec 23 14:06:00 2019 OPTIONS IMPORT: adjusting link_mtu to 1624
Mon Dec 23 14:06:00 2019 OPTIONS IMPORT: data channel crypto options modified
Mon Dec 23 14:06:00 2019 Data Channel: using negotiated cipher 'AES-256-GCM'
Mon Dec 23 14:06:00 2019 Outgoing Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Mon Dec 23 14:06:00 2019 Incoming Data Channel: Cipher 'AES-256-GCM' initialized with 256 bit key
Mon Dec 23 14:06:00 2019 interactive service msg_channel=936
Mon Dec 23 14:06:00 2019 ROUTE_GATEWAY 192.168.0.254/255.255.255.0 I=14 HWADDR=64:00:6a:94:b8:b0
Mon Dec 23 14:06:00 2019 GDG6: remote_host_ipv6=2a00:c70:130:1::19
Mon Dec 23 14:06:00 2019 GetBestInterfaceEx() returned if=14
Mon Dec 23 14:06:00 2019 GDG6: II=14 DP=::/0 NH=fe80::e69e:12ff:fe87:a674
Mon Dec 23 14:06:00 2019 GDG6: Metric=256, Loopback=0, AA=1, I=0
Mon Dec 23 14:06:00 2019 ROUTE6_GATEWAY fe80::e69e:12ff:fe87:a674 I=14
Mon Dec 23 14:06:00 2019 ROUTE6: 2000::/3 overlaps IPv6 remote 2a00:c70:130:1::19, adding host route to VPN endpoint
Mon Dec 23 14:06:00 2019 ROUTE6: 2a00:c70:130:1::19/64 overlaps IPv6 remote 2a00:c70:130:1::19, adding host route to VPN endpoint
Mon Dec 23 14:06:00 2019 open_tun
Mon Dec 23 14:06:00 2019 TAP-WIN32 device [Connexion au réseau local] opened: \\.\Global\{CF5B8C2D-A4C3-430A-BEA7-03A927401125}.tap
Mon Dec 23 14:06:00 2019 TAP-Windows Driver Version 9.24
Mon Dec 23 14:06:00 2019 Set TAP-Windows TUN subnet mode network/local/netmask = 10.8.0.0/10.8.0.2/255.255.255.0 [SUCCEEDED]
Mon Dec 23 14:06:00 2019 Notified TAP-Windows driver to set a DHCP IP/netmask of 10.8.0.2/255.255.255.0 on interface {CF5B8C2D-A4C3-430A-BEA7-03A927401125} [DHCP-serv: 10.8.0.254, lease-time: 31536000]
Mon Dec 23 14:06:00 2019 Successful ARP Flush on interface [24] {CF5B8C2D-A4C3-430A-BEA7-03A927401125}
Mon Dec 23 14:06:00 2019 MANAGEMENT: >STATE:1577106360,ASSIGN_IP,,10.8.0.2,,,,,2a00:c70:130:1::1019
Mon Dec 23 14:06:00 2019 add_route_ipv6(2a00:c70:130:1::/64 -> 2a00:c70:130:1::1019 metric 0) dev Connexion au réseau local
Mon Dec 23 14:06:00 2019 IPv6 route addition via service succeeded
Mon Dec 23 14:06:00 2019 Blocking outside dns using service succeeded.
Mon Dec 23 14:06:05 2019 TEST ROUTES: 1/1 succeeded len=0 ret=1 a=0 u/d=up
Mon Dec 23 14:06:05 2019 ROUTE remote_host protocol differs from tunneled
Mon Dec 23 14:06:05 2019 C:\WINDOWS\system32\route.exe ADD 0.0.0.0 MASK 128.0.0.0 10.8.0.1
Mon Dec 23 14:06:05 2019 Route addition via service succeeded
Mon Dec 23 14:06:05 2019 C:\WINDOWS\system32\route.exe ADD 128.0.0.0 MASK 128.0.0.0 10.8.0.1
Mon Dec 23 14:06:05 2019 Route addition via service succeeded
Mon Dec 23 14:06:05 2019 add_route_ipv6(2a00:c70:130:1::19/128 -> fe80::e69e:12ff:fe87:a674 metric 1) dev Connexion au réseau local
Mon Dec 23 14:06:05 2019 IPv6 route addition via service succeeded
Mon Dec 23 14:06:05 2019 add_route_ipv6(2a00:c70:130:1::/64 -> 2a00:c70:130:1::1a metric -1) dev Connexion au réseau local
Mon Dec 23 14:06:05 2019 ROUTE: route addition failed using service: L’objet existe déjà. [status=5010 if_index=24]
Mon Dec 23 14:06:05 2019 IPv6 route addition via service failed
Mon Dec 23 14:06:05 2019 add_route_ipv6(2000::/3 -> 2a00:c70:130:1::1a metric -1) dev Connexion au réseau local
Mon Dec 23 14:06:05 2019 IPv6 route addition via service succeeded
Mon Dec 23 14:06:05 2019 Initialization Sequence Completed
Mon Dec 23 14:06:05 2019 MANAGEMENT: >STATE:1577106365,CONNECTED,SUCCESS,10.8.0.2,2a00:c70:130:1::19,1194,,,2a00:c70:130:1::1019
