<html><head>
</head><body><div>Hi François, all,</div><div><br></div><div>I'm facing a problem in my setup on IPv6 level in one of our customer's eduVPN server :</div><div><br></div><div>My setup uses a Debian 11 server (using latest eduVPN 3.0.5-1) with public IPv6 address and no NAT.</div><div>On my server, followin settings are activated into the kernel:</div><div><br></div><div>net.ipv4.ip_forward = 1</div><div>net.ipv4.conf.all.proxy_arp = 1</div><div>net.ipv6.conf.all.forwarding = 1</div><div>net.ipv6.conf.all.proxy_ndp = 1</div><div><br></div><div>The problem is that the VPN connexions that receives a public IPv6 address doesn't receive the Neighbor Solicitations (and are thus unable to answer with Neighbor Advertisement); </div><div><br></div><div>I was able to manually "solve" the problem by proxying the address in the kernel using :</div><div><br></div><div>ip -6 neigh add proxy <the IPv6 address of the VPN's client> dev eth1</div><div><br></div><div>Of course, the problem is that you cannot prefill the kernel table with all the IPv6 addresses (it takes time and resources and is completely inefficient) -remember that you cannot use a prefix/length syntax if the "neigh add proxy" command, only single IPv6 at a time.</div><div><br></div><div>I've tried to replace kernel proxying with ndppd daemon, but while the daemon can see the requests, it cannot answer to it; apparently, it uses relatively old and unmaintained code and doesn't work properly anymore.</div><div><br></div><div>The thing I was finally trying to use is the trick you've setup for Frank a couple of weeks ago, using the 'connectScriptPath' => '/usr/local/bin/addproxy.sh'.</div><div><br></div><div>The script (attached) is well called but apparently the "ip -6 neigh ..." command always return an exit code of 2 (=problem reported by the kernel)</div><div><br></div><div>Any idea what could cause the problem ? </div><div><br></div><div>Or maybe you have a better idea on how to solved this IPv6 problem ?</div><div><br></div><div>Wkr,</div><div><br></div><div>Pascal</div><div><br></div><div><span><pre>-- <br></pre><div><b><font face="Arial, Helvetica, sans-serif" size="4" color="#0092d2">Pascal Panneels</font></b></div><div><font face="Arial, Helvetica, sans-serif" size="4"><b>System Architect</b></font></div><div><font face="Arial, Helvetica, sans-serif" size="4"><b>Belnet - Services</b></font></div><div><font color="#8b8e8d" face="Arial, Helvetica, sans-serif">WTC III</font></div><div><font color="#8b8e8d" face="Arial, Helvetica, sans-serif">Simon Bolivarlaan 30 Boulevard Simon Bolivar</font></div><div><font color="#8b8e8d" face="Arial, Helvetica, sans-serif">Brussel 1000 Bruxelles</font></div><div><font color="#8b8e8d" face="Arial, Helvetica, sans-serif">België - Belgique</font></div><div><font color="#8b8e8d" face="Arial, Helvetica, sans-serif">T: +32 2 790 33 33</font></div><div><a href="http://www.belnet.be"><b><font color="#0092d2" face="Arial, Helvetica, sans-serif">https://www.belnet.be</font></b></a></div><div><br></div></span></div></body></html>