Issue #2130
Updated by Tobias Brunner almost 9 years ago
Strongswan 1.6.2 on Android 7
The server ipsec.conf is setup to assign both ipv4 and ipv6 addresses and assign DNS servers also with both address families.
After a successful connection I can reach both ipv4 and ipv6 addresses, on the LAN and globally. As part of my testing I tried test-ipv6.com. The tests passed but I received a warning that it would not work on an ipv6 only network due to the lack of ipv6 DNS.
From a terminal on the Android I entered "getprop | grep dns" before and after a IPSEC connection. There was no change. The DNS server assigned by the carrier was the only one listed. The log file from Android is attached. Sensitive bits have been obfuscated.
A near identical connection for a Linux road warrior works as expected.
<pre>
conn nexus-6p
leftid=@boggus.com
leftcert=slim-server.crt
leftsubnet=0.0.0.0/0,::/0
rightcert=nexus-6p.crt
rightsourceip=%dhcp,2001::1e67:58ff:fe49:d489
rightdns=192.168.1.254,2001:568:ff09:10c::53
leftfirewall=yes
auto=add
</pre>
The server ipsec.conf is setup to assign both ipv4 and ipv6 addresses and assign DNS servers also with both address families.
After a successful connection I can reach both ipv4 and ipv6 addresses, on the LAN and globally. As part of my testing I tried test-ipv6.com. The tests passed but I received a warning that it would not work on an ipv6 only network due to the lack of ipv6 DNS.
From a terminal on the Android I entered "getprop | grep dns" before and after a IPSEC connection. There was no change. The DNS server assigned by the carrier was the only one listed. The log file from Android is attached. Sensitive bits have been obfuscated.
A near identical connection for a Linux road warrior works as expected.
<pre>
conn nexus-6p
leftid=@boggus.com
leftcert=slim-server.crt
leftsubnet=0.0.0.0/0,::/0
rightcert=nexus-6p.crt
rightsourceip=%dhcp,2001::1e67:58ff:fe49:d489
rightdns=192.168.1.254,2001:568:ff09:10c::53
leftfirewall=yes
auto=add
</pre>