On Fri, 2014-12-26 at 20:18 +0200, Nikos Mavrogiannopoulos wrote: > > Hi, > The logic as it is now for ocserv worker is to send IPv6 addresses if > the client is openconnect or the client has sent the header > "X-CSTP-Full-IPv6-Capability: true". That is because cisco's clients > didn't properly handle IPv6 if they didn't send that header. Really? Or do they just expect different headers and handle things differently. We seemed to have IPv6 support, and it was deployed at UCB (where I briefly had an account to test OpenConnect with IPv6) a *long* time before X-CSTP-Full-IPv6-Capability came about. Surely it was working with the AnyConnect client at that point to *some* extent? -- dwmw2 -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 5745 bytes Desc: not available URL: <http://lists.infradead.org/pipermail/openconnect-devel/attachments/20141226/71f26c61/attachment.bin>