c2f4c191 |
Since 2.3.0, OpenVPN officially supports IPv6, and all widely used
patches floating around for older versions have been integrated.
|
c1f25b66 |
IPv6 payload support
-------------------- |
512cda46 |
|
c2f4c191 |
This is for "IPv6 inside OpenVPN", with server-pushed IPv6 configuration
on the client, and support for IPv6 configuration on the tun/tap interface
from within the openvpn config.
The code in 2.3.0 supersedes the IPv6 payload patches from Gert Doering,
formerly located at http://www.greenie.net/ipv6/openvpn.html
|
512cda46 |
|
c2f4c191 |
The following options have been added to handle IPv6 configuration,
analogous to their IPv4 counterparts (--server <-> --server-ipv6, etc.) |
512cda46 |
|
c2f4c191 |
- server-ipv6
- ifconfig-ipv6
- ifconfig-ipv6-pool
- ifconfig-ipv6-push
- route-ipv6
- iroute-ipv6 |
c1f25b66 |
|
c2f4c191 |
see "man openvpn" for details how they are used. |
c1f25b66 |
IPv6 transport support
----------------------
|
c2f4c191 |
This is to enable OpenVPN peers or client/servers to talk to each other
over an IPv6 network ("OpenVPN over IPv6").
The code in 2.3.0 supersedes the IPv6 transport patches from JuanJo Ciarlante,
formerly located at http://github.com/jjo/openvpn-ipv6
|
69e03f4c |
OpenVPN 2.4.0 includes a big overhaul of the IPv6 transport patches
originally implemented for the Android client (ics-openvpn) |
c2f4c191 |
|
69e03f4c |
IPv4/IPv6 transport is automatically is selected when resolving addresses.
Use a 6 or 4 suffix to force IPv6/IPv4: |
c2f4c191 |
--proto udp6 |
69e03f4c |
--proto tcp4 |
c2f4c191 |
--proto tcp6-client |
69e03f4c |
--proto tcp4-server |
c2f4c191 |
--proto tcp6 --client / --proto tcp6 --server
|
69e03f4c |
On systems that allow IPv4 connections on IPv6 sockets
(all systems supporting IPV6_V6ONLY setsockopt), an OpenVPN server can |
c2f4c191 |
handle IPv4 connections on the IPv6 socket as well, making it a true |
69e03f4c |
dual-stacked server. Use bind ipv6only to disable this behaviour. |
c2f4c191 |
On other systems, as of 2.3.0, you need to run separate server instances
for IPv4 and IPv6. |