Re: [v6ops] v6-only (with NAT64) as default network during a conference?

[Gert Doering <[e-mail]>]

Hi,

On Thu, Jan 23, 2014 at 11:48:35AM +1000, George Michaelson wrote:
> Aren't the VPN failure modes you mention in the NAT64 case also plausible
> examples which will break in a 464XLAT case?

OpenVPN will not work if you force it to use 464xlat by connecting to an
IPv4 literal.

OTOH, the *Android* build of OpenVPN handles automatic failover from 
IPv4 to IPv6 just fine, so if you point your VPN client at the server's 
host name, NAT64 will do it's job.  So the 464xlat case is only relevant
if you put an IPv4 literal into your configs, and you're not supposed
to do that anyway...


The issue with NAT64 and OpenVPN affects the 2.3.x releases for "classic"
OSes (MacOS, Linux, Windows) - this one has no AFI failover support, so
it will be "IPv4-only" or "IPv6-only", and you need to manually change
the AFI used if behind a NAT64.  Then it will also work.  (Fixed in 
git master, to be released as 2.4.0 eventually)


Can't say anything about Cisco VPN client or any of the other ones
floating around.

Gert Doering
        -- NetMaster
-- 
have you enabled IPv6 on something today...?

SpaceNet AG                        Vorstand: Sebastian v. Bomhard
Joseph-Dollinger-Bogen 14          Aufsichtsratsvors.: A. Grundner-Culemann
D-80807 Muenchen                   HRB: 136055 (AG Muenchen)
Tel: [phone]           USt-IdNr.: DE813185279