On Fri, 2014-12-26 at 18:25 +0000, David Woodhouse wrote: > On Fri, 2014-12-26 at 20:18 +0200, Nikos Mavrogiannopoulos wrote: > > > > Hi, > > The logic as it is now for ocserv worker is to send IPv6 addresses if > > the client is openconnect or the client has sent the header > > "X-CSTP-Full-IPv6-Capability: true". That is because cisco's clients > > didn't properly handle IPv6 if they didn't send that header. > > Really? Or do they just expect different headers and handle things > differently. We seemed to have IPv6 support, and it was deployed at UCB > (where I briefly had an account to test OpenConnect with IPv6) a *long* > time before X-CSTP-Full-IPv6-Capability came about. I have disabled IPv6 support in anyconnect clients because I have had no opportunity to test them. If sskaje verifies that they work if they are treated as being openconnect, I'll enable it there as well. regards, Nikos
