Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    IPsec over IPv6

    Scheduled Pinned Locked Moved
    IPsec
    3
    3
    387
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • Z
      zimbo2000
      last edited by zimbo2000

      I have a tunnel (IKEv2) which works perfekt over IPv4 endpoints.

      When i change the endpoints to the IPv6 Addresses (or "Both") then the ip4 Packets will not go thru.

      The Phase1 is established, and also the Phase2 comes up.

      Should this work, or is mixing IPv6 and IPv4 on Phase1 and Phase2 not supported?

      1 Reply Last reply Reply Quote 0
      • L
        lst_hoe
        last edited by

        It depends on the endpoints. We have shortly tested dual-protocol (IPv6 and IPv4) endpoint with IPv4-only in the tunnel. It has mostly worked as expected with Windows 10 1803 and later, but because of https://redmine.pfsense.org/issues/9175 not at all with Windows 7 or Windows 10 before 1803.

        1 Reply Last reply Reply Quote 0
        • jimpJ
          jimp Rebel Alliance Developer Netgate
          last edited by

          As long as it's IKEv2 it should be able to carry mixed traffic in the phase 2 / child SA.

          Remember: Upvote with the 👍 button for any user/post you find to be helpful, informative, or deserving of recognition!

          Need help fast? Netgate Global Support!

          Do not Chat/PM for help!

          1 Reply Last reply Reply Quote 0
          • First post
            Last post
          Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.