Skip to content

Disable local IPv6 while connected to an IPv4-only VPN #142

Description

@GoogleCodeExporter
When connecting to an IPv4-only VPN while connected to a dual stack local 
network, new connections to hosts reachable over IPv6 are still established 
using the local address (verified by accessing various "what is my IPv6"-sites 
- they all report my local address).

Is there a way to disable IPv6 connectivity for the duration of the VPN 
connection from within the VPN API? Cisco AnyConnect seems to be able to do it, 
since on the same network, when connecting to the Cisco VPN, IPv6 hosts become 
unreachable.

There should be at least an option for that, since unreachable IPv6 hosts are 
preferable to traffic being routed over the local address from a security 
viewpoint.

Or can this possibly fixed by a server-side setting, maybe by pushing an 
invalid IPv6 route?

If it helps, I can post the output of 'ip route' when connected to AnyConnect 
and OpenVPN later today - I don't have IPv6 connectivity right now.

Original issue reported on code.google.com by lukas.ri...@gmail.com on 15 Feb 2013 at 9:22

Activity

  1. schwabe commented on Jul 2, 2015

    @schwabe
    Owner

    I will not implement this since it is not needed on my devices with 5.0+. That said implementing this in OpenVPN should be /relatively/ straight forward by sending icmpv6 unreachable.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions