Project

General

Profile

IPv6 Examples - strongSwan 4.x

These examples cover releases before 5.0.0. For newer examples refer to IPv6 Examples.

Site-to-Site

IPv6 in IPv6 tunnel mode IKEv1 IKEv2
IPv4 in IPv6 tunnel mode IKEv1 IKEv2
IPv6 in IPv4 tunnel mode IKEv1 IKEv2

Host-to-Host

IPv6 tunnel mode IKEv1 IKEv2
IPv6 transport mode IKEv1 IKEv2

Remote Access

RSA authentication with X.509 certificates IKEv1 IKEv2
PSK authentication with pre-shared keys IKEv1 IKEv2

Please be aware that the strongSwan pluto and charon IKE daemons cannot listen on IPv6 link-local addresses (fe80:..). You must assign a site-local, unique-local, or global IPv6 address to the physical network interface first.