IPv6 Examples¶
Site-to-Site¶
| IPv6 in IPv6 tunnel mode | IKEv1 | IKEv2 |
| IPv4 in IPv6 tunnel mode | IKEv1 | IKEv2 |
| IPv6 in IPv4 tunnel mode | IKEv1 | IKEv2 |
Host-to-Host¶
| IPv6 tunnel mode | IKEv1 | IKEv2 |
| IPv6 transport mode | IKEv1 | IKEv2 |
Remote Access¶
| RSA authentication with X.509 certificates | IKEv1 | IKEv2 |
| PSK authentication with pre-shared keys | IKEv1 | IKEv2 |
Please be aware that the strongSwan pluto and charon IKE daemons cannot listen on IPv6 link-local addresses (fe80:..). You must assign a site-local, unique-local, or global IPv6 address to the physical network interface first.