IPv4/IPv6 mixed IPSEC configuration broken



  • I would not be surprised for first Strongswan release it is not supported but the interface breaks under certain circumstances, namely setup an IPv4 transport, change to "Tunnel IPv6" and save.

    Warning: inet_pton(): Unrecognized address in /etc/inc/util.inc on line 934 Warning: inet_pton(): Unrecognized address in /etc/inc/util.inc on line 934 
    Warning: inet_pton(): Unrecognized address in /etc/inc/util.inc on line 934 Warning: inet_pton(): Unrecognized address in /etc/inc/util.inc on line 934
    

    And this interesting set of error messages from the UI which appear a bit confused:

    The following input errors were detected:

    A valid local network IPv4 address must be specified or you need to change Mode to IPv6
    A valid remote network IPv4 address must be specified or you need to change Mode to IPv6

    As a quirk you can provide a hostname which resolves to IPv6 and configure for IPv4 tunneling without the complaints.



  • @MrMoo:

    As a quirk you can provide a hostname which resolves to IPv6 and configure for IPv4 tunneling without the complaints.

    Worse yet, I've had a v4 tunnel try (and fail, of course) to use a v6 address for a hostname that resolves for both.


Log in to reply