Netgate Discussion Forum
    • Categories
    • Recent
    • Tags
    • Popular
    • Users
    • Search
    • Register
    • Login

    OpenVPN IPv6 Local Network

    Scheduled Pinned Locked Moved OpenVPN
    6 Posts 2 Posters 640 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • C
      chrisjmuk
      last edited by

      Hello.

      i have configured OpenVPN to connect to both IPv4 and IPv6 local networks.

      The IPv4 works fine but the IPv6 local netowork doesnt seem to NAT when connected to the openvpn.

      I can see the IPv6 network on the adapater, it just doesnt NAT.

      I have tried a few NAT settings but with no luck.

      Any Ideas?

      JKnottJ 1 Reply Last reply Reply Quote 0
      • C
        chrisjmuk
        last edited by

        I am also having issues pinging the gateway when vpn connected

        I have enabled inter-client communication and i can ping the ipv4 ip 10.0.50.1 but i cant ping the ipv6 fe80::1 which is very strange.

        My isp doesnt support IPv6 but it should still tunnel as far as i know, i can get it working on softether.

        JKnottJ 1 Reply Last reply Reply Quote 0
        • C
          chrisjmuk
          last edited by

          got it working now mostly, needed to change the openvpn ipv6 ip range as it conflicted with my local one.

          I am getting some weird pings now - i think something is wrong with either the nat or routing

          I get one single ping to a local ipv6 on a server, when i ping a pfsense its fine and i get full echo's

          JKnottJ 1 Reply Last reply Reply Quote 0
          • JKnottJ
            JKnott @chrisjmuk
            last edited by

            @chrisjmuk said in OpenVPN IPv6 Local Network:

            The IPv4 works fine but the IPv6 local netowork doesnt seem to NAT when connected to the openvpn.

            Why are you using NAT on IPv6? Just use another /64 and route to it, as the network gods intended.

            PfSense running on Qotom mini PC
            i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
            UniFi AC-Lite access point

            I haven't lost my mind. It's around here...somewhere...

            1 Reply Last reply Reply Quote 0
            • JKnottJ
              JKnott @chrisjmuk
              last edited by

              @chrisjmuk said in OpenVPN IPv6 Local Network:

              but i cant ping the ipv6 fe80::1 which is very strange.

              Where is that fe80::1? If you have to route to get to it, it will never work as those addresses don't pass through routers. Also, with link local addresses, you often have to specify the interface you're using to reach it.

              PfSense running on Qotom mini PC
              i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
              UniFi AC-Lite access point

              I haven't lost my mind. It's around here...somewhere...

              1 Reply Last reply Reply Quote 0
              • JKnottJ
                JKnott @chrisjmuk
                last edited by

                @chrisjmuk

                I get the impression you're heading in the wrong direction. With IPv6, most ISPs provide multiple /64s. I get /56, which contains 256 /64s from mine. I then assign a /64 to wherever I have a network. For example, I have 1 each for my main LAN, guest WiFi, test LAN, Cisco router and OpenVPN. I suspect you're still thinking in terms of IPv4, where is was necessary to use a hack, NAT, to make up for the address shortage. No need for that nonsense on IPv6.

                PfSense running on Qotom mini PC
                i5 CPU, 4 GB memory, 32 GB SSD & 4 Intel Gb Ethernet ports.
                UniFi AC-Lite access point

                I haven't lost my mind. It's around here...somewhere...

                1 Reply Last reply Reply Quote 0
                • First post
                  Last post
                Copyright 2025 Rubicon Communications LLC (Netgate). All rights reserved.