core icon indicating copy to clipboard operation
core copied to clipboard

IPv6 NDP PAckets get lost at OpenVPN

Open MrCybertux opened this issue 3 years ago • 1 comments
trafficstars

Important notices

Before you add a new report, we ask you kindly to acknowledge the following:

  • [X] I have read the contributing guide lines at https://github.com/opnsense/core/blob/master/CONTRIBUTING.md
  • [X] I am convinced that my issue is new after having checked both open and closed issues at https://github.com/opnsense/core/issues?q=is%3Aissue -> Did my best to check but i am just a small sysadmin with little coding skills 😅

I am trying to setup a VPN gateway with the Opnsense and OpenVPN. It runs on TCP on IPv6 and IPv4. Connecting by either IPv4 or IPv6 is working fine. IPv4 Connections to the internet work fine. IPv6 is not working. I did a Packet trace an it seems it is a Problem with the VPN clients IPv6s not answering to NDP Packets.

A clear and concise description of what the bug is, including last known working version (if any).

Tip: to validate your setup was working with the previous version, use opnsense-revert (https://docs.opnsense.org/manual/opnsense_tools.html#opnsense-revert)

To Reproduce

Steps to reproduce the behavior:

  1. Setup OpenVPN on OPNsense like Setup SSL VPN Road Warrior
  2. Add a IPv6 Network
  3. Connect a client an try to reach IPv6 Internet
  4. No Connection possible

Expected behavior

Geting IPv6 internet Acces via VPN.

Relevant log files

Found nothing regarding the lost Packets.

Additional context

It should be a Multi-WAN VPN Gateway witch acts be the dafault gateway at the Client.

Environment

Software version used and hardware type if relevant, e.g.:

OPNsense 22.1.6 (amd64, LiberSSL). Intel Core Processor (Broadwell, no TSX, IBRS) (1 cores, 1 threads) Hosted at Vultr

MrCybertux avatar May 05 '22 12:05 MrCybertux

Sorry for not posting initially but here are the IPv6 Infos:

Main IPv6: 2a05:XXXX:XXXX:e27:5400:03ff:fef1:86bf Block from Hoster: 2a05:XXXX:XXXX:e27::/64 Client IPv6: 2a05:XXXX:XXXX:e27::1000

MrCybertux avatar May 05 '22 14:05 MrCybertux

This issue has been automatically timed-out (after 180 days of inactivity).

For more information about the policies for this repository, please read https://github.com/opnsense/core/blob/master/CONTRIBUTING.md for further details.

If someone wants to step up and work on this issue, just let us know, so we can reopen the issue and assign an owner to it.

OPNsense-bot avatar Nov 01 '22 12:11 OPNsense-bot