OpenVPN with IPv6
Shadow Hawkins on Saturday, 16 April 2005 13:00:59
Hi,
a few months ago there was a patch on the openvpn-devel mailinglist that introduced UDP/IPv6-transport for VPNs. Unfortunately it was too late for inclusion in 2.0 tree ...
Original patch at:
http://www.irrigacion.gov.ar/juanjo/openvpn/openvpn-2.0_beta20-udp6-jjo-v0.2.2.patch.gz
Rediffed from current OpenVPN 2.0rc21 (fixed two rejects):
http://users.birkenwald.de/~berni/temp/openvpn-2.0_rc21_udp6_jjo-v0.2.2.patch.gz
You need to run the autotools-suite to generate a new configure-script (and probably some more). I did this without any knowledge about it and probably did it wrong, but people were successful to compile it with this patch
Rediffed from OpenVPN 2.0rc21 with autotools ran:
http://users.birkenwald.de/~berni/temp/openvpn-2.0_rc21_udp6_jjo-v0.2.2-autotools.patch.gz
configure, make, make install is enough, then
openvpn --proto udp6 --remote <ipv6addr> + your remaining options and you're set
Caveats I found so far:
* Does not compile on FreeBSD (I only tried on Linux)
* You cannot do any route-related things in your config-file/command-line arguments as OpenVPN exits immediately with "assertion failed".
* I'm not sure, but it seems PMTUD is broken or only partially working, when having stupid problems with your passing traffic you might need --fragment
My VPN connection into the office moved to that and I downloaded something with bittorrent this night via that tunnel, worked flawless.
UDPv6 link local (bound): [AF_INET6][undef]:5002
UDPv6 link remote: [AF_INET6]2001:638:100::xxx
Peer Connection Initiated with [AF_INET6]2001:638:100::xxx
Initialization Sequence Completed
Happy compiling :-)
BTW, OpenVPN homepage is at http://openvpn.sf.net
OpenVPN with IPv6
Shadow Hawkins on Friday, 28 April 2006 14:09:21
Can it be that this patch was lost in 2.1 development, too? :(
I digged through openvpn-2.1_beta14 source code and found nothing about IPv6 transport. Also, the 2.0 patch shown above does not apply.
Would be good if at least 2.1 final contain IPv6 support.
Regards,
Peter
Posting is only allowed when you are logged in. |