openvpn and ipv6
I have setup a linode from the marketplace that has openvpn installed and it works ok from my Ipad except the IP Number is my linode box IPV4. I used a tool from Google called What is my IP Address to do the check. How do I tell my linode instance to use IPV6 instead of IPV4? I need my instance to detect my IPV6 as well as IPV4.
2 Replies
✓ Best Answer
I would guess, by default, the Marketplace app won't use IPV6 over the VPN, which I gather is what you're asking about. This will involve editing configuration files and firewall configurations. In my opinion, using the Marketplace app will probably complicate matters in this particular situation, but here are some general steps you'll need to take.
- As @stevewi suggested, you'll want to set up an AAA record on your domain pointing at the IPV6 address of your Linode, unless you aren't using a domain. If you aren't using a domain, I'd recommend connecting to the VPN over IPV4 initially, which will provide the most compatibility with networks that might not have IPV6 connectivity yet.
- Get a /64 IPV6 prefix routed to your Linode, you should be able to do this from the Linode cloud manager. The guide on IPV6 should tell you how to do this.
- Configure OpenVPN to work with your newly routed /64. This will be similar to the configuration currently in place for IPV4, but you'll be using IPV6 addresses instead.
- Enable IPV6 forwarding, because it probably won't be enabled. You'll also need to accept router advertisements to continue getting your IPV6 address automatically over SLAAC, unless you're using the network helper.
- Use your firewall to allow forwarding of IPV6 addresses, I would recommend allowing IPV6 outbound from your VPN device, probably tun0, to the internet through eth0, and only related or established connections going from eth0 to tun0. This way, not just anyone can access your device through its VPN routed IPV6 address.
There will probably be quite a bit of research ahead of you to get this working successfully.
Good luck.
Blake
