jice
/ gist:188f18ab361d03bb9058
Last active
May 15, 2019 17:21
Strongwan + Windows VPN IKEv2 + IPv6
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| Problem Statement | |
| ----------------- | |
| The Windows native VPN client does not configure the default IPv6 route through the tunnel, even if the negociated remote traffic selector is ::/0. | |
| Causes | |
| ------ | |
| Windows sends router solicitations and awaits router advertisement from the other side. To this end, it uses link-local unicast and multicast addresses, just like a machine would on a broadcast-capable link (e.g. Ethernet). |
jice
/ strongswan ubu 14.04
Created
November 5, 2014 00:44
Build latest Strongswan (with libipsec, DNSSEC support, ...) on Ubuntu 14.04
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
| 0. After a fresh install | |
| # aptitude update && aptitude full-upgrade && reboot | |
| 1. Install necessary packages for building Strongswan (may vary depending on your configure options, configure script will tell you) | |
| # aptitude install build-essential libgmp-dev libunbound-dev libldns-dev | |
| 2. Get, check, and unpack the sources |