Community discussions

MikroTik App
 
User avatar
Kentzo
Long time Member
Long time Member
Topic Author
Posts: 512
Joined: Mon Jan 27, 2014 3:35 pm
Location: California

How to assign an IPv6 address to an IPsec roadwarrior client?

Sat May 13, 2023 4:21 am

What needs to be enabled to so that a client can get an IPv6 assigned? So far it seems like the it operates in IPv4-only mode.

To simplify, I want all traffic to get routed over the IPsec IKEv2 tunnel.
 
User avatar
Kentzo
Long time Member
Long time Member
Topic Author
Posts: 512
Joined: Mon Jan 27, 2014 3:35 pm
Location: California

Re: How to assign an IPv6 address to an IPsec roadwarrior client?

Fri May 19, 2023 12:10 am

Still cannot figure out how to get RouterOS's IPsec responder to assign an IPv6 address.

I can see in Wireshark that my client requests INTERNAL_IP6_* attributes, but the responder ignores them and replies only with INTERNAL_IP4_*. However, RouterOS logs this under the "ipsec" topic:
May/18/2023 13:45:34 ipsec ipsec: preparing internal IPv6 subnet
May/18/2023 13:45:34 ipsec ipsec: preparing internal IPv6 subnet
What am I missing?
 
User avatar
Kentzo
Long time Member
Long time Member
Topic Author
Posts: 512
Joined: Mon Jan 27, 2014 3:35 pm
Location: California

Re: How to assign an IPv6 address to an IPsec roadwarrior client?

Tue Jun 06, 2023 12:26 am

Tried the eap-radius as the authentication method. On radius (RouterOS's User Manager) I specified the "Framed-IPv6-Address" attribute, that did not work: RouterOS only allocated the IPv4 address.
 
Nightowl82
just joined
Posts: 24
Joined: Fri Feb 09, 2024 9:52 pm

Re: How to assign an IPv6 address to an IPsec roadwarrior client?

Sat Feb 10, 2024 12:33 am

We are struggeling with the same question.

viewtopic.php?t=204321

Any updates on this?
 
User avatar
Kentzo
Long time Member
Long time Member
Topic Author
Posts: 512
Joined: Mon Jan 27, 2014 3:35 pm
Location: California

Re: How to assign an IPv6 address to an IPsec roadwarrior client?

Tue Feb 13, 2024 8:23 pm

I don't think that's supported by RouterOS's IPsec client.
 
Nightowl82
just joined
Posts: 24
Joined: Fri Feb 09, 2024 9:52 pm

Re: How to assign an IPv6 address to an IPsec roadwarrior client?

Thu Feb 15, 2024 7:56 pm

I was able to create a workarround! Look in the linked post!

viewtopic.php?t=204321
 
User avatar
Kentzo
Long time Member
Long time Member
Topic Author
Posts: 512
Joined: Mon Jan 27, 2014 3:35 pm
Location: California

Re: How to assign an IPv6 address to an IPsec roadwarrior client?

Thu Feb 15, 2024 8:43 pm

Great that it works for you!

Was not feasible in my setup where clients want to derive network configuration from the IPsec responder.
 
Nightowl82
just joined
Posts: 24
Joined: Fri Feb 09, 2024 9:52 pm

Re: How to assign an IPv6 address to an IPsec roadwarrior client?

Thu Feb 15, 2024 9:07 pm

It’s not perfect, but it will do for the clients that is dependent on IPv6 for their work.

It seems that other clients like phones,etc, still can get IPv4-addresses from the responder.

lets hope MT fixes this, and hopefully updates their documentation, with both limitations and the workaround.

Who is online

Users browsing this forum: Briancer, GoogleOther [Bot], lurker888 and 57 guests