pfSense English Support > OpenVPN

IPV6 OpenVPN

(1/4) > >>

xman111:
Hey guys, quick question.  I have disabled IPV6 on PFsense as I don't use it. 

I have one instance I need it though.  My Rogers LTE cellphone uses IPV6.  When I want to VPN into my home network and view my IP cameras or anything else it does not connect.  The only way I can connect is to go into my phone's APN settings and turn the one option of IPV6&IPV4 to IPV4 only and I don't really want to do that.

Any help would be much appreciated..

johnpoz:
So guessing its using a ipv6 to ipv4 gateway and there is some problem there when hitting ipv4 vpn.. Are you using udp only, have you tried enable tcp instance to see if that works?

T-mobile went ipv6 only on their cells awhile back.. And there was a bit of a learning curve for their gateway from ipv6 to ipv4...  For a short time I had enabled a ipv6 instance of vpn so I could get in with my phone..  But they corrected their problem and I can now vpn in via ipv6 phone connection to my IPv4 IP on pfsense.

Does your isp support IPv6, or you could setup HE (hurricane electric) ipv6 tunnel to support vpn into your pfsense via that, etc.

JKnott:
Do you also use Rogers for Internet?  They also provide IPv6 there, so maybe enabling it is the way to go.

One curious thing I noticed was they used 464XLAT, with a 194.0.0.x address for IPv4 over IPv6, but with the Google Pixel 2 I bought recently, the IPv4 address is in  the 25.112.12.x range, so I'm not sure if they're using 464XLAT or NAT with this phone.  In the settings, the current APN is Rogers Internet ltemobile.apn, though Rogers Tethering ltedata.apn is available.  No idea what the difference is.  My old phone, a Nexus 5, also uses ltemobile.apn.

xman111:
I will have a look at the TCP.   I do not think my ISP supports IPv6.  I am on Rogers for cellular but Shaw for home internet.

I was hoping it would be a quick fix.  John, you helped me setup my home network and it is working GREAT.  It is a little complicated with about 6 VLAN's and VPN client and server, i really don't want to mess it up.  I really was hoping I could just tick a button on the Openvpn client export or something along those lines.

Sorry, I forgot to add.. I can connect to my home network with the IPv6, it says connect success, I just cannot do anything..

johnpoz:
So when you connect on your phone it shows you a ipv6 address for the server..  See example of my phone connected via tmobile..

As you see it gives an IPv6 address for the server which is not mine... Owned by tmobile
https://whois.arin.net/rest/net/NET6-2607-7700-1

I can ping into my network when connected to the vpn.. Without any problems.

Navigation

[0] Message Index

[#] Next page

Go to full version