"Enable IPv6" seems to actually break IPv6
Posted: Sun Oct 07, 2018 12:33 am
tl;dr: when enabling IPv6 in Viscosity's preferences, the interface gets a /128 IP:
However, if I uncheck (disable) the 'Enable IPv6' option for the connection, it works! It's a it counter-intuitive
While just leaving IPv6 enabled unchecked does allow for IPv6 routing, I think the problem compounds as the local DNS resolver will not query for a AAAA record as v6 is not marked as enabled (this is an assumption on my part as to why aaaa records are not sought).
This is Viscosity 1.7.11 (1463) connecting to OpenVPN 2.4.4 with a sample config as follows:
Thanks a million,
Love the product by the way - we recommend it to everyone!
Cheers,
Barry
Code: Select all
This is unusable and any pushed routes do not take as the gateway (OpenVPN server) is not reachable.vtap0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
ether d2:dc:69:c2:ab:95
inet 192.0.2.10 netmask 0xffffff00 broadcast 192.0.2.255
inet6 fe80::18e2:6ee4:b380:8db0%vtap0 prefixlen 64 secured scopeid 0x10
inet6 2001:db8:18:7::4 prefixlen 128
However, if I uncheck (disable) the 'Enable IPv6' option for the connection, it works! It's a it counter-intuitive
Code: Select all
Note the prefixlen = 128 on the top and prefixlen = 64 just above.vtap0: flags=8843<UP,BROADCAST,RUNNING,SIMPLEX,MULTICAST> mtu 1500
ether a2:5a:d2:f7:75:98
inet 192.0.2.10 netmask 0xffffff00 broadcast 192.0.2.255
inet6 fe80::a05a:d2ff:fef7:7598%vtap0 prefixlen 64 scopeid 0x10
inet6 2001:db8:18:7::4 prefixlen 64
While just leaving IPv6 enabled unchecked does allow for IPv6 routing, I think the problem compounds as the local DNS resolver will not query for a AAAA record as v6 is not marked as enabled (this is an assumption on my part as to why aaaa records are not sought).
This is Viscosity 1.7.11 (1463) connecting to OpenVPN 2.4.4 with a sample config as follows:
Code: Select all
proto udp6
mode server
dev tap
topology subnet
server 192.0.2.1 255.255.255.0
ifconfig-ipv6 2001:db8:7::1/64 2001:db8:7::2
ifconfig-ipv6-pool 2001:db8:7::3/64
push "dhcp-option DNS 192.0.2.162"
push "dhcp-option DNS6 2001:db8:2::4"
push "dhcp-option DOMAIN example.com"
push "dhcp-option DOMAIN example.com"
push "redirect-gateway def1 ipv6"
Thanks a million,
Love the product by the way - we recommend it to everyone!
Cheers,
Barry