On Thu, 2014-08-14 at 01:53 +0000, Quan Zhou wrote: > Hi, > 3. I have assigned a /48 IPv6 pool in the ocserv, that /48 was came > from my ISP, and works on other machines 3.1 Upon successful connection > was established, the clients has obtained an valid IPv6 address 3.2 in > details, "Secured connect" is ::/0, means everything IPv6 was route to > the ocserv by default, but 3.3 clients cannot connect to any v6 sites, > neither can do ping6. Did you try pinging the PtP addresses assigned to the server and the client tun devices? What was the result? ocserv and openconnect don't handle IPv6 any different than IPv4, so it may be some firewalling or routing issue. regards, Nikos