search

trailofbits / algo

Set up a personal VPN in the cloud
https://blog.trailofbits.com/2016/12/12/meet-algo-the-vpn-that-works/
GNU Affero General Public License v3.0
28.64k stars 2.31k forks source link

Windows IKEv2 over IPSec doesn't provide a IPv6 connection #1453

Closed lzlrd closed 5 years ago

lzlrd commented 5 years ago

Describe the bug

When connecting via IPSec to the VPN on Windows where my physical network is IPv4 only, I do not end up with a dual-stack connection.

To Reproduce

Steps to reproduce the behavior:

  1. ./algo
  2. Install .ps1 file for Windows VPN
  3. Connect using Settings

Expected behavior

A dual-stack connection after routing through the VPN.

Additional context

As above, my physical network is IPv4-only. I DO get an IPv6 address using Wireguard on my Android device (kernel-level [rooted] wireguard) and my iPad (iOS wireguard client).

image

jackivanov commented 5 years ago

Windows doesn't add the default route for ipv6. I'll prepare a fix for the powershell script, but for now you can use the following workaround:

::/0 does'n work for some reason. 

Add-VpnConnectionRoute -ConnectionName "<algo connection name>" -DestinationPrefix ::/1
Add-VpnConnectionRoute -ConnectionName "<algo connection name>" -DestinationPrefix 8000::/1

Change <algo connection name> to your connection name

jackivanov commented 5 years ago

@lazerl0rd Does it work for you? https://github.com/trailofbits/algo/pull/1490

jackivanov commented 5 years ago

We've decided to deprecate IKEv2 for windows https://github.com/trailofbits/algo/issues/1493

lzlrd commented 5 years ago

@jackivanov sorry, it does work. Sad to see it’s deprecated as WG for Windows is still a bit buggy in it’s stopping and starting and the Wintun drivers are seemingly causing issues with some unreleased software I’m testing.