[strongSwan] Can I make an IPv6-over-IPv4 tunnel which does not block IPv4 traffic?

Martin Willi martin at strongswan.org
Wed Sep 5 13:25:39 CEST 2012

Hi Andrew,

> I've found that creating an IPv6 over IPv4 tunnel between hosts
> blocks traffic on the IPv4 network between those hosts (creating a
> "required" security policy matching the IPv4 host -- as I understand
> it).

This shouldn't be the case. If you have IPv6 addresses in
left/rightsubnet only, IPv4 traffic shouldn't match your policy.

How does your ipsec.conf look like, and where do you see an IPv4 policy?


More information about the Users mailing list