[opensuse] IPSec VPN and IPv6
I am planning on setting up an IPSec VPN between two openSUSE systems. I have used OpenVPN for years, but it does not currently support IPv6 in tun mode (version 2.3 might). IPSec should support IPv6, as that's what it was originally developed for, before being adapted to IPv4. I have installed the various VPN & IPSec packages, including the Novell IPSec client "Turnpike". However, in looking around it, all the settings appear to be for IPv4 only. Has anyone set up an IPv6 VPN in openSUSE either with or without using Turnpike. Information on that appears to be in short supply, though there's plenty for IPv4. The alternative would be to set up a 6in4 tunnel via an IPv4 VPN, which is less desirable due to the added overhead. tnx jk -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On Fri, 2011-11-11 at 12:26 -0500, James Knott wrote:
I am planning on setting up an IPSec VPN between two openSUSE systems. I have used OpenVPN for years, but it does not currently support IPv6 in tun mode (version 2.3 might). IPSec should support IPv6, as that's what it was originally developed for, before being adapted to IPv4. I have installed the various VPN & IPSec packages, including the Novell IPSec client "Turnpike". However, in looking around it, all the settings appear to be for IPv4 only. Has anyone set up an IPv6 VPN in openSUSE either with or without using Turnpike. Information on that appears to be in short supply, though there's plenty for IPv4. The alternative would be to set up a 6in4 tunnel via an IPv4 VPN, which is less desirable due to the added overhead.
openSUSE ships StringSWAN, that is where you probably want to start for IPSEC. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
Adam Tauno Williams wrote:
openSUSE ships StringSWAN, that is where you probably want to start for IPSEC.
Actually, it's "StrongSWAN", and I have been looking at that and trying to determine the best way to configure it. There's very little info on using it with IPv6. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
On Fri, 2011-11-11 at 17:11 -0500, James Knott wrote:
Adam Tauno Williams wrote:
openSUSE ships StringSWAN, that is where you probably want to start for IPSEC.
Actually, it's "StrongSWAN", and I have been looking at that and trying to determine the best way to configure it. There's very little info on using it with IPv6.
I though in the test-cases op strongswan there were several configuration setups with IPv6, that they use for automatic (regression) testing.. Ans regarding OpenVPN, IPv6 is indeed the major change with respect to V2.2. And it (a snapshot) is already available on the OBS (in somebodie home dir's) hw -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org
participants (3)
-
Adam Tauno Williams -
Hans Witvliet -
James Knott