Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Added IPv6 support #20

Merged
merged 3 commits into from Jul 31, 2016
Merged

Added IPv6 support #20

merged 3 commits into from Jul 31, 2016

Conversation

tbartelmess
Copy link
Contributor

I've added IPv6 support. I creates a private IPv6 subnet (2a00:1450:400c:c05::/64) for the VPN, and uses ndppd to announce the prefix.

@gaomd
Copy link
Owner

gaomd commented Jul 1, 2016

Thank you, But I got some questions.

  1. Why announce IPv6 prefix?
  2. Is OpenSSL not installed in 16.04 by default?

@tbartelmess
Copy link
Contributor Author

tbartelmess commented Jul 2, 2016

Ok to 1. I had some issues that the host didn't know where to send the data, and there were unanswered NDP queries. But I am still looking into not announcing them.

about 2.: Nope openssl is not installed by default

# end ref
leftfirewall=yes
right=%any
rightsourceip=10.8.0.0/16
rightsourceip=10.8.0.0/16,2a00:1450:400c:c05::/64
Copy link
Owner

@gaomd gaomd Jul 27, 2016

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The IP range 2a00:1450:400c:c05::/64 seems not in the range of reserved IP addresses, please update it to use private IP range, I thinks the IPv4 mapped addresses section is quite applicable.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Oops. Yes you are right it should. However I don't think it should come out of the IPv6 mapped addresses, because it should probably be a full /64 to enable people to do SLAAC at some point. I think it should come out of be a /64 out of the fc00::/7subnet. I'll update this later today.

Copy link
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Oh, you are right, the IPv4 mapped addresses maps to the entire IPv4 internet. fc00::/7 is the way to go.

@gaomd gaomd merged commit 3b91dff into gaomd:master Jul 31, 2016
@gaomd gaomd mentioned this pull request Sep 17, 2016
tsl0922 added a commit to tsl0922/docker-ikev2-vpn-server that referenced this pull request May 10, 2017
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants