Re: Can't set up IPv6 for IKEv2 VPN

2019-02-25 Thread Fernando Gont
On 11/2/19 11:32, Aram Hăvărneanu wrote: > Hello, > > I am trying to set-up an dual-stack IKEv2/IPsec VPN. The server is > OpenBSD (obviously). The clients are macs (so far). IPv4 works, but > I can't get IPv6 working for the clients. The clients get a v6 IP > and a good route, but it seems routin

Re: Can't set up IPv6 for IKEv2 VPN

2019-02-11 Thread Stefan Sperling
On Mon, Feb 11, 2019 at 03:51:00PM +0100, Aram Hăvărneanu wrote: > > By default, iked inserts a flow which blocks IPv6. To prevent > > this, either configure explicit IPv6 flows (from/to with IPv6 > > addresses), or pass the -6 option to iked (see the man page). > > Forgot to mention that I alread

Re: Can't set up IPv6 for IKEv2 VPN

2019-02-11 Thread Aram Hăvărneanu
>> By default, iked inserts a flow which blocks IPv6. To prevent >> this, either configure explicit IPv6 flows (from/to with IPv6 >> addresses), or pass the -6 option to iked (see the man page). > > Forgot to mention that I already do this: > > freedom# cat /etc/rc.conf.local > iked_flags=-

Re: Can't set up IPv6 for IKEv2 VPN

2019-02-11 Thread Aram Hăvărneanu
> By default, iked inserts a flow which blocks IPv6. To prevent > this, either configure explicit IPv6 flows (from/to with IPv6 > addresses), or pass the -6 option to iked (see the man page). Forgot to mention that I already do this: freedom# cat /etc/rc.conf.local iked_flags=-6 unbou

Re: Can't set up IPv6 for IKEv2 VPN

2019-02-11 Thread Stefan Sperling
On Mon, Feb 11, 2019 at 03:32:17PM +0100, Aram Hăvărneanu wrote: > Hello, > > I am trying to set-up an dual-stack IKEv2/IPsec VPN. The server is > OpenBSD (obviously). The clients are macs (so far). IPv4 works, but > I can't get IPv6 working for the clients. The clients get a v6 IP > and a good ro

Can't set up IPv6 for IKEv2 VPN

2019-02-11 Thread Aram Hăvărneanu
Hello, I am trying to set-up an dual-stack IKEv2/IPsec VPN. The server is OpenBSD (obviously). The clients are macs (so far). IPv4 works, but I can't get IPv6 working for the clients. The clients get a v6 IP and a good route, but it seems routing doesn't work on OpenBSD's side. I am using an /48