IPv6 only VPN

[marz]

Hi,

I need to setup a Client-VPN and Site-to-Site to Pfsense, and I only have IPv6, no IPv4.
I read possibilities to tunnel IPv6 through a IPv4 VPN, but this not an option as I dont have IPv4.
Is there a way to accomplish that with Pfsense?

Any pointers would be welcome.

[eri--]

IPv6 VPN should work same as IPv4 from the interface!

[marz]

Ok, I tried again.
Unfortunately the Client cannot connect to the PFsense server yet.

First of all I have the following situation:

• The Pfsense FW has a true IPV6 IP address on the internet.
• My OpenVPN client has only IPv4, I am using Teredo to connect using IPV6 (this works Ok, can connect to internet sources using Ipv6).  Is it even possible to use a IPv6 VPN through a Teredo connection?

I installed the VPN server and installed the client on my Win8 PC, but cannot connect at all.
To configure OpenVPN I used the following guide: https://chubbable.com/setup-openvpn-pfsense

What I did:

• Setup CA
• Installed Pfsense VPN Server certificate on PFsense
• Created a user
• Created a user certificate
• installed the client export utility

Because I cannot seem to use the Wizard (see notable things below), I create the Open VPN server manually with settings:

• Protocol: UDP6
• Device mode : Tun
• Ipv4 Tunnel network address set to a fantasy Ipv4 address I do not have on the WAN interface
• Ipv6 Tunnel network address set a real Ipv6 internet Address in the range of the WAN interface
• Opened up  FW rules for the OpenVPN interface
• Opened up FW rules on the WAN interface
• Export Client Package and installed on my win8 PC.
• It cannot connect at all. Error : "Connecting to client failed"
• Cant find any logs on the client.
• I dont see any traffic in the Pfsense logs when trying to connect from the client.

Notable thing I run into:

• When using the wizard to create a new Open VPN server, It requires me to use an IPv4 address for the Tunnel network. I only have IPV6. Error when saving: " The field 'Tunnel Network' must contain only valid ipv4 CIDR range(s) separated by commas.  " Is this to be expected?

• When not using the wizard, I can configure an IPv6 Tunnel Network Address, but I also MUST configure a IPv4 Tunnel Network address, If I don't error: "The field Tunnel network is required." Is this to be expected?

Please help.

[marz]

Well, got it working.
I tried over from another pc, which has a true IPV6 address.
I can now setup the IPv6 OpenVPN tunnel.
Also I can now access IPV4 resources on the LAN, Through the IPv6 tunnel.

I gave up trying through Teredo