IPv6 in AnyConnect for iOS

Nikos Mavrogiannopoulos nmav at gnutls.org
Sat Dec 27 00:55:22 PST 2014


On Fri, 2014-12-26 at 18:25 +0000, David Woodhouse wrote:
> On Fri, 2014-12-26 at 20:18 +0200, Nikos Mavrogiannopoulos wrote:
> > 
> > Hi,
> >  The logic as it is now for ocserv worker is to send IPv6 addresses if
> > the client is openconnect or the client has sent the header
> > "X-CSTP-Full-IPv6-Capability: true". That is because cisco's clients
> > didn't properly handle IPv6 if they didn't send that header.
> 
> Really? Or do they just expect different headers and handle things
> differently. We seemed to have IPv6 support, and it was deployed at UCB
> (where I briefly had an account to test OpenConnect with IPv6) a *long*
> time before X-CSTP-Full-IPv6-Capability came about.

I have disabled IPv6 support in anyconnect clients because I have had no
opportunity to test them. If sskaje verifies that they work if they are
treated as being openconnect, I'll enable it there as well.

regards,
Nikos





More information about the openconnect-devel mailing list