Dual Stack IKEv2 on virtual IP



  • On my WAN interface there are two virtual IPs, one IPv4 and one IPv6. Setting the interface to IPv4 works, although connecting with IPv6 address gives NO PROPOSAL error. Looking at the configuration file it seems that once you select dual stack, it pulls IPs from that interface. However, IPv4 virtual IP obviously wouldn’t have IPv6 so proposal failed.

    Is there a workaround for this?



  • This is to my knowledge a limitation of the GUI. You can only choose Dual-Stack with an Interface which has both IPv4 and IPv6 assigned, a VIP is either IPv4 or IPv6.
    We have changed our setup to use the WAN IPv4 / IPv6 as VPN Endpoint and use VIP for the other Services, mostly for NAT which is IPv4 only anyway.