ESXi, pfSense and Hetzner IPv6

[jochar]

Ok This is the config i have please check

PS: should i use the /48 block or the /64 from HE?

Thanks

[johnpoz]

you would break the /48 up into multiple /64 you wouldn't use the whole thing ;)

[jochar]

how about my configs?

do they look ok to you?

cause they dont work

[johnpoz]

what doesn't work ipv6 over openvpn?  You don't have a tunnel network..

Your not providing any dns servers to client.. What doesn't work?  Did you just run through the openvpn wizard?

Where are your wan firewall rules that allow the openvpn connection, this would be created auto if you ran the wizard.

[jochar]

Hello and thanks for the reply

Yes clients get a IP when i was playing with it the ygot a IPv6 too but id did not open IPv4 or IPv6 addresses just when i did put in a ip it worked

For OpenVPN i did run the wizard and have default rules there

[johnpoz]

"IPv4 or IPv6 addresses just when i did put in a ip it worked"

What IPv6 did they get?  You didn't put in a ipv6 tunnel network - so how is they would of gotten a ipv6 address???

Well without any dns how would you resolve anything?

[jochar]

i have tried to put in subnet, then removed it and all over again

Where do i put the DNS servers? should i use ISP or google DNS?

Thanks

[johnpoz]

what do you mean where do you put in dns??  Right there on the openvpn setup screen..  Does googledns resolve your internal network devices?  Why would you not just point to pfsense..

[jochar]

Hello,

At this point I have no idea what am I doing or what am I doing right or wrong

See the screen attached, i have added 8.8.8.8 and 8.8.4.4 under Client Settings > DNS Servers > I have ticked Client Settings and put the IP's there

I can connect to OpenVPN server but there is no internet access i get IP 192.168.10.x and dns is googledns but rest fails hard

Thanks again

[johnpoz]

Where are you handing out dns???  Client tab is for when PFSENSE is the vpn CLIENT..

[jochar]

@johnpoz:

Where are you handing out dns???  Client tab is for when PFSENSE is the vpn CLIENT..

Hello

Yes OpenVPN > Server > Client Settings >
DNS Serrvers: i have ticked Provide a DNS server list to clinets
Server #1 8.8.8.8
Server #2 8.8.4.4

thats all there but clients cant access net

Regards

[johnpoz]

So this is where your doing it?  See pic

On your CLIENT do an ipconfig /all.. what does it show for dns for the openvpn connection?

So for example I connect to one of my vps running openvpn..  Now can you do a query via vpn, do a traceroute do you go down the tunnel to get to the dns you provided?