This discussion has been locked.

You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Enable IPv6 on SSL VPN

Hello,

I have a user that has T Mobile as their home internet. Through research and asking peers in the field it seems that T Mobile's setup is IPv6 compatible only. When the user tries to connect via VPN, they get intermittent and slow connectivity to some things and no connectivity to other things. When using another internet connection, the VPN works fine.

How do I enable IPv6 over the SSL VPN? Is it as simple as allowing IPv6 addresses to be handed out? Or do I need to do some kind of translation? We don't have IPv6 properly configured on our network and it will likely be some time before we can get into that, and the employee needs to work from home.

Any thoughts/suggestions appreciated. TIA

This thread was automatically locked due to age.

Top Replies

Vivek Jagad 6 months ago in reply to wilspin +1 suggested

Hey wilspin , Under the Global SSL VPN setting ensure teh Lease mode is configured as IPv4 & IPv6:

0 wilspin 6 months ago

I don't think there is a way at this time. note the lack of replies I tried to set this up but configuring an IPV6 vpn server was not possible.
Cancel
Vote Up 0 Vote Down

Cancel
0 Mihail Karageorgiev 6 months ago

You can configure 6in4 tunnel, for example you can use "Tunnelbroker"
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad 6 months ago

Hello Sandra Koehler ,

Thank you for reaching out to the community, IPv6 is supported for SSL VPN: Remote access.

For configurations you may reach out to your local partner/reseller or professional services.

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Global Support & Services

Log a Support Case | Sophos Service Guide
Best Practices – Support Case

Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 wilspin 6 months ago in reply to Vivek Jagad

Yes Vivek, I have seen that chart. But what I cannot find is the step by step 'how to' set up instructions. Can you show us that?

Dan
Cancel
Vote Up 0 Vote Down

Cancel
0 Vivek Jagad 6 months ago in reply to wilspin

Hey wilspin ,

Under the Global SSL VPN setting ensure teh Lease mode is configured as IPv4 & IPv6:

Thanks & Regards,
_______________________________________________________________

Vivek Jagad | Team Lead, Global Support & Services

Log a Support Case | Sophos Service Guide
Best Practices – Support Case

Sophos Community | Product Documentation | Sophos Techvids | SMS
If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up +1 Vote Down

Cancel
0 wilspin 6 months ago in reply to Vivek Jagad

Vivek you missed the point. Sandra says T-Mobile is IPv6 only not dual stack. I do not think its a choice here in SFW. v4 or v4 & v6. No v6 standalone correct? IPv4 cannot be retired quite yet.
Cancel
Vote Up 0 Vote Down

Cancel
0 rfcat_vk 6 months ago in reply to wilspin

Hi,

please check whether the ISP/RSP is using native IPv6 to the internet or using a IPv6 to IP4 gateway. Why I asked is my mobile carrier uses IPv6 internally but has an IPv6 to IP4 gateway.

Ian

XG115W - v20.0.1 MR-1 - Home

XG on VM 8 - v20 GA

If a post solves your question please use the 'Verify Answer' button.
Cancel
Vote Up 0 Vote Down

Cancel
0 wilspin 6 months ago in reply to rfcat_vk

It does not matter as I have got the dual stack working now. Had to guess all the v6 settings no tech doc! What's really surprising is the v4 is behind CGNAT and v6 is not. First time to have VPN server being CGNAT way to go Sophos! Using mobile phone hotspot for client and server on Starlink w/dual stack.
Cancel
Vote Up 0 Vote Down

Cancel
0 wilspin 6 months ago in reply to wilspin

I can connect to desktops with v4 and v6 ip addresses! VPN counts 2 users one for v4 and one for v6
Cancel
Vote Up +1 Vote Down

Cancel