On 28.01.2024 11:44, Axel Braun wrote:
Am Samstag, 27. Januar 2024, 18:46:51 CET schrieb Andrei Borzenkov:
On 27.01.2024 20:32, Axel Braun wrote:
Hi,
after my recent experience with vpnc, which obviously does not support IPv6. I made another attempt with Wireguard, to connect to a IPv6 only host (DS-LITE connection). I could not get Strongswan for IPSec running.
I followed the instructions of the FritzBox (6600 cable) and created a working Wireguard connection. At least it claims to work. Here is the startup protocoll:
I guess you see yourself that it does not provide any information.
yes, except the 'successful' start
Start VPN and show the output of
ip a ip -4 r ip -6 r ip rule ip -6 rule
https://paste.opensuse.org/pastes/47b3ce0ce8d6
Cheers Axel
Well, as is obvious, your VPN interface does not have any global IPv6 address so it cannot have normal IPv6 connectivity, nor there are any IPv6 routing rules to forward traffic via VPN interface. Does your provider support IPv6 over WireGuard at all? E.g. ProtonVPN does not. It explicitly blocks all IPv6 traffic over VPN. Even if your provider is using some kind of NAT, lack of routing still means IPv6 will not go over VPN. And your VPN interface does not have any IPv4 address so even IPv4 should not work.
31501: not from all fwmark 0xcaca lookup 51914
Show ip route show table 51914