<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3" face="arial narrow,sans-serif">Hi, </font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3" face="arial narrow,sans-serif"> </font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="arial narrow,sans-serif">I am using the sample configurations [1] to setup the ikev2/ip-two-pools-v4v6 and notice one thing related to the routing:</font></font></p>
<div style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3" face="arial narrow,sans-serif"></font> </div>
<div style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="arial narrow,sans-serif">If Carol sets up the connection with Moon using the <span style="BACKGROUND:lime">IPv4</span> interfaces as the tunnel endpoints, both IP v4 and v6 VPN addresses are assigned to Carol, IPv4 routing is working fine between Moon and Carol, but<span style="BACKGROUND:yellow"> IPv6</span> routing is not working from Moon to Carol.</font></font></div>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="arial narrow,sans-serif">But, if Carol sets up the connection with Moon using the <span style="BACKGROUND:lime">IPv6</span> interfaces as the tunnel endpoints, both IP v4 and v6 VPN addresses are assigned to Carol, IPv6 routing is working fine between Moon and Carol, but <span style="BACKGROUND:yellow">IPv4</span> routing is not working from Moon to Carol.</font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3" face="arial narrow,sans-serif"> </font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="arial narrow,sans-serif">I notice that Moon sets up both IPv4 and IPv6 routing to the same single source address (endpoint) of Carol, i.e.</font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3" face="arial narrow,sans-serif">If tunnel endpoints are IPv4, Moon sets up both IPv4 and IPv6 routings to the IPv4 endpoint address of Carol, thus the IPv6 routing failed.</font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3" face="arial narrow,sans-serif">If tunnel endpoints are IPv6, Moon sets up both IPv4 and IPv6 routings to the IPv6 endpoint address of Caro, thus the IPv4 routing failed.</font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3" face="arial narrow,sans-serif"> </font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="arial narrow,sans-serif">In the single IP case, I guess that server is based its routing decision on the single source address (endpoint) of the client. But in the dual IP case, how does Carol convey her IPv4 and IPv6 endpoint addresses as the source addresses to the Moon? Is there a way to do that?</font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3" face="arial narrow,sans-serif"> </font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="arial narrow,sans-serif">How could Moon be configured such that it should expect both IPv4 and IPv6 endpoint addresses from Carol in case of the dual IP single tunnel setup? Would this make it establish both the IPv4 and the IPv6 routings properly over the same tunnel?</font></font></p>
<div style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3" face="arial narrow,sans-serif"> </font></div>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="arial narrow,sans-serif">Thank you!</font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3" face="arial narrow,sans-serif">Robert</font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3" face="arial narrow,sans-serif"> </font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoPlainText"><font size="3" face="arial narrow,sans-serif">[1] </font><a href="http://www.strongswan.org/uml/testresults5rc/ikev2/ip-two-pools-v4v6/"><font size="3" face="arial narrow,sans-serif">http://www.strongswan.org/uml/testresults5rc/ikev2/ip-two-pools-v4v6/</font></a></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3" face="arial narrow,sans-serif"> </font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="arial narrow,sans-serif">============ <span style> </span>Moon config remains the same ===========<b style></b></font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="arial narrow,sans-serif">Moon ipsec.conf</font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="arial narrow,sans-serif"><span style> </span>left=%defaultroute</font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="arial narrow,sans-serif"><span style> </span>leftsubnet=<a href="http://10.9.8.0/24,fec1::/64">10.9.8.0/24,fec1::/64</a></font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="arial narrow,sans-serif"><span style> </span>right=%any</font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="arial narrow,sans-serif"><span style> </span>rightsourceip=fec1::1/64,10.9.8.1</font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3" face="arial narrow,sans-serif"> </font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="arial narrow,sans-serif">============ <span style> </span>tunnel endpoints are IPv4 addresses ===========<b style></b></font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="arial narrow,sans-serif">Carol ipsec.conf</font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="arial narrow,sans-serif"><span style> </span>right=10.41.73.71</font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="arial narrow,sans-serif"><span style> </span>rightsubnet=<a href="http://10.9.8.0/24,fec1::/64">10.9.8.0/24,fec1::/64</a></font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="arial narrow,sans-serif"><span style> </span>left=%defaultroute</font></font></p>
<div style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="arial narrow,sans-serif"><span style> </span><span style> </span>leftsourceip=%config4,%config6</font></font></div>
<div style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3" face="arial narrow,sans-serif"></font> </div>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="arial narrow,sans-serif">Log:</font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="arial narrow,sans-serif">Oct<span style> </span>2 22:20:54 04[IKE] <font style="BACKGROUND-COLOR:#ff0000">10.41.73.234</font> is initiating an IKE_SA</font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="arial narrow,sans-serif">Oct<span style> </span>2 22:20:54 07[KNL] getting a local address in traffic selector <a href="http://10.9.8.0/24">10.9.8.0/24</a> </font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="arial narrow,sans-serif">Oct<span style> </span>2 22:20:54 07[KNL] using host 10.9.8.2</font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="arial narrow,sans-serif">Oct<span style> </span>2 22:20:54 07[KNL] using 10.41.73.234 as nexthop to reach 10.41.73.234</font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="arial narrow,sans-serif">Oct<span style> </span>2 22:20:54 07[KNL] 10.41.73.71 is on interface eth0</font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="arial narrow,sans-serif">Oct<span style> </span>2 22:20:54 07[KNL] installing route: <a href="http://10.9.8.1/32">10.9.8.1/32</a> via 10.41.73.234 src 10.9.8.2 dev eth0</font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="arial narrow,sans-serif">Oct<span style> </span>2 22:20:54 07[KNL] getting a local address in traffic selector fec1::/64</font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="arial narrow,sans-serif">Oct<span style> </span>2 22:20:54 07[KNL] using host fec1::2</font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="arial narrow,sans-serif">Oct<span style> </span>2 22:20:54 07[KNL] using 10.41.73.234 as nexthop to reach 10.41.73.234</font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="arial narrow,sans-serif">Oct<span style> </span>2 22:20:54 07[KNL] 10.41.73.71 is on interface eth0 </font></font></p>
<div style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3" face="arial narrow,sans-serif">Oct<span style> </span>2 22:20:54 07[KNL] installing route: <font style="BACKGROUND-COLOR:#ffff00">fec1::1/128</font> via <font style="BACKGROUND-COLOR:#ff0000">10.41.73.234</font> src fec1::2 dev eth0</font></div>
<div style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"></font><font face="arial narrow,sans-serif"> </font></div>
<div style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="arial narrow,sans-serif">ping6 fec1::1 from Moon to Carol failed:</font></font></div>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="arial narrow,sans-serif">Oct<span style> </span>2 22:21:05 12[KNL] creating acquire job for policy fec1::2/128[udp/47216] === fec1::1/128[udp/1025] with reqid {1}</font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="arial narrow,sans-serif">Oct<span style> </span>2 22:21:05 08[CFG] trap not found, unable to acquire reqid 1</font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3" face="arial narrow,sans-serif"> </font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="arial narrow,sans-serif">============ <span style> </span>tunnel endpoints are IPv6 addresses ===========</font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="arial narrow,sans-serif">Carol ipsec.conf</font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="arial narrow,sans-serif"><span style> </span>right=2002:c023:9c17:21c::a29:4947</font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="arial narrow,sans-serif"><span style> </span>rightsubnet=<a href="http://10.9.8.0/24,fec1::/64">10.9.8.0/24,fec1::/64</a></font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="arial narrow,sans-serif"><span style> </span>left=%defaultroute</font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="arial narrow,sans-serif"><span style> </span>leftsourceip=%config4,%config6</font></font></p>
<div style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3" face="arial narrow,sans-serif"></font> </div>
<div style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="arial narrow,sans-serif">Log:</font></font></div>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="arial narrow,sans-serif">Oct<span style> </span>2 22:18:16 07[IKE] <font style="BACKGROUND-COLOR:#ff0000">2002:c023:9c17:21c:21b:78ff:fee0:dbfc</font> is initiating an IKE_SA</font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="arial narrow,sans-serif">Oct<span style> </span>2 22:18:16 10[KNL] getting a local address in traffic selector <a href="http://10.9.8.0/24">10.9.8.0/24</a></font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="arial narrow,sans-serif">Oct<span style> </span>2 22:18:16 10[KNL] using host 10.9.8.2</font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="arial narrow,sans-serif">Oct<span style> </span>2 22:18:16 10[KNL] using 2002:c023:9c17:21c:21b:78ff:fee0:dbfc as nexthop to reach 2002:c023:9c17:21c:21b:78ff:fee0:dbfc</font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="arial narrow,sans-serif">Oct<span style> </span>2 22:18:16 10[KNL] 2002:c023:9c17:21c::a29:4947 is on interface eth0</font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="arial narrow,sans-serif">Oct<span style> </span>2 22:18:16 10[KNL] installing route: <font style="BACKGROUND-COLOR:#ffff33"><a href="http://10.9.8.1/32">10.9.8.1/32</a></font> via <font style="BACKGROUND-COLOR:#ff0000">2002:c023:9c17:21c:21b:78ff:fee0:dbfc</font> src 10.9.8.2 dev eth0</font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="arial narrow,sans-serif">Oct<span style> </span>2 22:18:16 10[KNL] getting a local address in traffic selector fec1::/64</font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="arial narrow,sans-serif">Oct<span style> </span>2 22:18:16 10[KNL] using host fec1::2</font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="arial narrow,sans-serif">Oct<span style> </span>2 22:18:16 10[KNL] using 2002:c023:9c17:21c:21b:78ff:fee0:dbfc as nexthop to reach 2002:c023:9c17:21c:21b:78ff:fee0:dbfc</font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="arial narrow,sans-serif">Oct<span style> </span>2 22:18:16 10[KNL] 2002:c023:9c17:21c::a29:4947 is on interface eth0</font></font></p>
<div style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3" face="arial narrow,sans-serif">Oct<span style> </span>2 22:18:16 10[KNL] installing route: fec1::1/128 via 2002:c023:9c17:21c:21b:78ff:fee0:dbfc src fec1::2 dev eth0</font></div>
<div style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3" face="arial narrow,sans-serif"></font> </div>
<div style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3">
<div style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="arial narrow,sans-serif">ping 10.9.8.1 from Moon to Carol failed</font></font></div></font></div>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3"><font face="arial narrow,sans-serif">Oct<span style> </span>2 22:18:29 15[KNL] creating acquire job for policy <a href="http://10.9.8.2/32[udp/42668]">10.9.8.2/32[udp/42668]</a> === <a href="http://10.9.8.1/32[udp/1025]">10.9.8.1/32[udp/1025]</a> with reqid {1}</font></font></p>
<p style="MARGIN:0in 0in 0pt" class="MsoNormal"><font size="3" face="arial narrow,sans-serif">Oct<span style> </span>2 22:18:29 11[CFG] trap not found, unable to acquire reqid 1</font></p>