IPSEC Mobile Clients with IPv4 / IPv6 connection

[lst_hoe]

Hello,

is it possible to have Mobile IPSEC Clients to either connect with IPv4 or IPv6 and use internal IPv4 virtual interfaces in both cases? We have internal IPv4 but clients should be able to establish IPSEC also across IPv6 because DS-Lite IPv4 really sucks.
We have created a "Mobile Client" setting which works, but i can only choose either IPv4 or IPv6 not both and we also failed to create a second Mobile Client setting. Any hints if this should work?

Many thanks

Andreas

[lst_hoe]

I have found this thread saying in pfsense 2.3 it should be possible
https://forum.pfsense.org/index.php?topic=91975.0
but i have not seen any change regarding this and we need the other way around e.g. IPv4 in a IPv6 tunnel.

Regards

Andreas

[lst_hoe]

Hm, at least Strongswan should be able to do what we need :

https://www.strongswan.org/testing/testresults/ipv6/net2net-ip4-in-ip6-ikev2/

So it is not possible with the GUI settings or is it prevented by some other conflict?

Any idea?

Thanks

Andreas