[strongSwan] Can I make an IPv6-over-IPv4 tunnel which does not block IPv4 traffic?

[Martin Willi]

Hi Andrew,

> I've found that creating an IPv6 over IPv4 tunnel between hosts
> blocks traffic on the IPv4 network between those hosts (creating a
> "required" security policy matching the IPv4 host -- as I understand
> it).

This shouldn't be the case. If you have IPv6 addresses in
left/rightsubnet only, IPv4 traffic shouldn't match your policy.

How does your ipsec.conf look like, and where do you see an IPv4 policy?

Regards
Martin