On Wed, 2017-03-15 at 13:21 +0100, Thomas Glanzmann wrote: > Hello everyone, > sorry that was a pebkac. I had the following in my hosts file: > > 2a01:4f8:b0:2fff::2 vpn.gmvl.de Excellent. That saves me from looking up what the successor to RFC3484 is, and saying "but we should conform to...". Given that you don't have an IPv6 route at all (as opposed to an IPv6 route that just doesn't work), you should now see the Legacy IP address *first*, right?? -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 4938 bytes Desc: not available URL: <http://lists.infradead.org/pipermail/openconnect-devel/attachments/20170315/b95d817f/attachment.bin>