OpenVPN Connect iOS ignores IPv6 route entries
Posted: Tue Jun 06, 2023 1:34 pm
Hi,
Client: iPhone with iOS 16.5.
OpenVPN-Connect: 3.3.3
I am trying to use my iPhone as OpenVPN-Client for tunneling ipv4 and ipv6 traffic. My OpenVPN-Win10 Client works without problems with the same OpenVPN-Server.
I have route entries like the following in my ovpn client-config (the network numbers are just examples)
The client log shows that all routes are added
When I do a traceroute on my iPhone the above IPv4 numbers are routed through the tunnel (correct), but the IPv6 numbers are NOT routed through the tunnel (wrong). The ipv6 numbers are routed outside of the tunnel.
If I replace the above route entries in my client-config and add
instead, then ALL IPv4 and IPv6 is routed through the tunnel (like it should with this config) and I can also reach the networks from the above route-entries through the tunnel.
But how do I add IPv6 route entries to the client config, if I want that only some IPv6 networks are routed into the tunnel?
Did I do something wrong or is there a bug?
Any help is appreciated. Thanks a lot
Client: iPhone with iOS 16.5.
OpenVPN-Connect: 3.3.3
I am trying to use my iPhone as OpenVPN-Client for tunneling ipv4 and ipv6 traffic. My OpenVPN-Win10 Client works without problems with the same OpenVPN-Server.
I have route entries like the following in my ovpn client-config (the network numbers are just examples)
Code: Select all
route 10.0.0.0 255.0.0.0
route 172.16.0.0 255.240.0.0
route-ipv6 fd00:2000::/32
route-ipv6 2001:db8:a::/64
Code: Select all
[Jun 06, 2023, 15:08:43] NIP: adding (included) IPv4 route 10.0.0.0/8
[Jun 06, 2023, 15:08:43] NIP: adding (included) IPv4 route 172.16.0.0/12
[Jun 06, 2023, 15:08:43] NIP: adding (included) IPv6 route fd00:2000::/32
[Jun 06, 2023, 15:08:43] NIP: adding (included) IPv6 route 2001:db8:a::/64
If I replace the above route entries in my client-config and add
Code: Select all
redirect-gateway ipv4
redirect-gateway ipv6
But how do I add IPv6 route entries to the client config, if I want that only some IPv6 networks are routed into the tunnel?
Did I do something wrong or is there a bug?
Any help is appreciated. Thanks a lot