Important note about SSL VPN compatibility for 20.0 MR1 with EoL SFOS versions and UTM9 OS. Learn more in the release notes.

Thread Info
  • State Suggested Answer
  • Locked Locked
  • Replies 9 replies
  • Answers 1 answer
  • Subscribers 44 subscribers
  • Views 2827 views
  • Users 0 members are here
Options
Suggested
This discussion has been locked.
You can no longer post new replies to this discussion. If you have a question you can start a new discussion

Enable IPv6 on SSL VPN

Sandra Koehler

Hello,

I have a user that has T Mobile as their home internet. Through research and asking peers in the field it seems that T Mobile's setup is IPv6 compatible only. When the user tries to connect via VPN, they get intermittent and slow connectivity to some things and no connectivity to other things. When using another internet connection, the VPN works fine.

How do I enable IPv6 over the SSL VPN? Is it as simple as allowing IPv6 addresses to be handed out? Or do I need to do some kind of translation? We don't have IPv6 properly configured on our network and it will likely be some time before we can get into that, and the employee needs to work from home.

Any thoughts/suggestions appreciated. TIA



This thread was automatically locked due to age.
Parents Reply Children
  • 0 in reply to Vivek Jagad

    Vivek you missed the point. Sandra says T-Mobile is IPv6 only not dual stack. I do not think its a choice here in SFW. v4 or v4 & v6. No v6 standalone correct? IPv4 cannot be retired quite yet.

  • 0 in reply to wilspin

    Hi,

    please check whether the ISP/RSP  is using native IPv6 to the internet or using a IPv6 to IP4 gateway. Why I asked is my mobile carrier uses IPv6 internally but has an IPv6 to IP4 gateway.

    Ian

    XG115W - v20.0.2 MR-2 - Home

    XG on VM 8 - v20.0.2 MR-2

    If a post solves your question please use the 'Verify Answer' button.

  • 0 in reply to rfcat_vk

    It does not matter as I have got the dual stack working now. Had to guess all the v6 settings no tech doc! What's really surprising is the v4 is behind CGNAT and v6 is not. First time to have VPN server being CGNAT way to go Sophos! Using mobile phone hotspot for client and server on Starlink w/dual stack.

  • 0 in reply to wilspin

    I can connect to desktops with v4 and v6 ip addresses! VPN counts 2 users one for v4 and one for v6

Unfiltered HTML