OPNsense Forum

English Forums => Virtual private networks => Topic started by: otto001 on June 30, 2022, 05:00:51 PM

Title: Opnsene, OpenVPN Roadworrior IPv6
Post by: otto001 on June 30, 2022, 05:00:51 PM
Hi,

I want to implement the following:
Internet (IPv4/6) --> Opnsense/Openvpn --> IPv6 ONLY --> internal IPv6 only network

Does anyone know, if this is possible? I just set up a Openvpn server and did not define any IPv4 adresses there, now I am getting

2022-06-30 15:48:25 TCP/UDP: Preserving recently used remote address: [AF_INET]xxx.xxx.xxx.xxx:1194
2022-06-30 15:48:25 UDP link local (bound): [AF_INET][undef]:0
2022-06-30 15:48:25 UDP link remote: [AF_INET]xxx.xxx.xxx.xxx:1194
2022-06-30 15:48:25 [internal_vpn_server_cert] Peer Connection Initiated with [AF_INET]xxx.xxx.xxx.xxx:1194
2022-06-30 15:48:25 sitnl_send: rtnl: generic error (-101): Network is unreachable
2022-06-30 15:48:25 TUN/TAP device tap0 opened
2022-06-30 15:48:25 net_iface_mtu_set: mtu 1500 for tap0
2022-06-30 15:48:25 net_iface_up: set tap0 up
2022-06-30 15:48:25 net_addr_v6_add: fd03:181f:cafe:8d3e::1000/64 dev tap0
2022-06-30 15:48:25 sitnl_send: rtnl: generic error (-13): Permission denied


when trying to connect using openvpn client on linux with the ovpn file I downloaded from opnsense.
Any hint would be great!
If any more information would be useful, please let me know. I am not sure what to provide here....

Best regards and thanks in advance,
Otto
Title: Re: Opnsene, OpenVPN Roadworrior IPv6
Post by: otto001 on July 04, 2022, 08:55:24 AM
No one? :-(
Title: Re: Opnsene, OpenVPN Roadworrior IPv6
Post by: tiermutter on July 04, 2022, 10:22:18 AM
What is your setting for IPv6 tunnel adress? I am wondering about "fd03" which should be "fd00".
Title: Re: Opnsene, OpenVPN Roadworrior IPv6
Post by: otto001 on July 04, 2022, 11:17:58 AM
Hi,
just found the problem :-)
It was NOT related to opnsense/openvpn - I had disabled IPv6 on the client I used to test (tough IPv6 adresses showed up with ip a).
Just tried again and VPN connection using IPv6 ONLY is working now.
Thanks anyway for your help!
Best regards and thanks again,
Otto