IPV6 OpenVPN

[xman111]

i got the tunnel up and running and it looks like when i connect i get a ipv6 ip.  I wasn't sure how to setup the ipv6 dhcp server.  Also, i still can't do anything once connected but it looks like i am heading the right way.

[johnpoz]

There is a big difference between talking ipv6 in the tunnel and to ipv6 clients on the other end of the tunnel and using ipv6 as the method of connecting to the server and routing ipv4 through the tunnel, etc..

Lets forget the whole ipv6 for a bit - you say you connect via IPv4… when your phone is set for ipv6 and ipv4.. But nothing works???  But your server shows you connected.. But you can not ping anything?  What exactly is not working.. Can you ping the end of the tunnel, can you ping pfsense interface on lan side?

But you say if you set your phone to ipv4 only it works??  What is working exactly?

[xman111]

Hey John, when i set my phone to IPV4/IPV6, i can connect to my home network but some things do not work.

When I use OpenVPN for android:

-I cannot log into PFsense
-I cannot view my cameras
-I can browse the internet

When I use OpenVPN Connect:

-I cannot log into PFsense
-I cannot view my cameras
-I cannot  browse the internet

When I set the phone to IPV4 only, i can do everything.

[johnpoz]

When you say you browse the internet you sure your going over the vpn to do that?

What specific client are you using - What does your routing table look like on your device when you get connected?  The openvpn connect client has been updated recently and they had some growing pains, etc.

I show the current version as 1.2.6

[xman111]

John,

I am not 100% sure I am going over the VPN.  I just assumed because if I turn it off, it works, turn it on and it doesn't work.  I am trying both OpenVPN for Android and OpenVPN Connect.  I just downloaded OpenVPN Connect for Android and it shows 1.1.27.

I will have to try to figure out the routing table on the phone, never done that before.

[johnpoz]

hurricane electric app will show you that.. give me a sec and take a picture of mine

edit… So take a look at your connection info in your vpn app should see what is being handed out.  And the Hurricane electric app can show you the routes going down your tunnel, etc.

links to the apps here
https://networktools.he.net/


[xman111]

hey John, on the HE app, what menu is the routes under for you to get that second screen shot, i tried all of them and couldn't find it.

[johnpoz]

The one that says routing table - scroll down the menu..


[xman111]

hey John, scrolled down the list but mine looks a little different than yours, just installed from google play store.  One thing though I got the tunnel up on pfsense and when i go to test ipv6, everything comes back a check..  Still trying to get the phone working though.

[xman111]

and when i connect, sometimes it looks like the first screenshot, sometimes the second.  Looks like ipv4 sometimes and ipv6 the other. I have no idea what's going on :)

[xman111]

anyone have any ideas?

[trumee]

@johnpoz:

T-mobile went ipv6 only on their cells awhile back.. And there was a bit of a learning curve for their gateway from ipv6 to ipv4…  For a short time I had enabled a ipv6 instance of vpn so I could get in with my phone..  But they corrected their problem and I can now vpn in via ipv6 phone connection to my IPv4 IP on pfsense.

Please can you elaborate what did you have to do on the pfsense side to get it working with tmobile ipv6. If I use my vpn server the phone shows my vpn ip for IPv4 but shows tmobile ipv6 address. Is it possible to change pfsense vpn server so that it offers ipv6 address too?
What should be the ipv6 server address akin to 10.8.0.4 in IPv4?