CentOS - Feb 2011 - ipsec with ipv4 and ipv6 not working

Hello,

How do I find out what is happening to my packets thru my ipsec tunnel.
They just seem to disappear on the remote side.

I have successfully got the pings thru
when everything has an ipv6 address, but am not successful when trying
to connect two ipv4 lans across an ipv6 ipsec tunnel. All fw chains both 4 and 6
are set to ACCEPT. NAT is turned off.

       eth0               eth1                                         eth1
        eth0
10.1.254.254/17  2001:xxxx:1628::254 <----ipv6 internet ----->
2001:xxxx:e334::254  10.0.254.254/17

12:00:02.296972 IP6 2001:xxxx:1628::254 > 2001:xxxx:e334::254:
ESP(spi=0x07454bc3,seq=0x28b), length 132
12:00:03.308751 IP6 2001:xxxx:1628::254 > 2001:xxxx:e334::254:
ESP(spi=0x07454bc3,seq=0x28c), length 132
12:00:04.296857 IP6 2001:xxxx:1628::254 > 2001:xxxx:e334::254:
ESP(spi=0x07454bc3,seq=0x28d), length 132
12:00:05.293748 IP6 2001:xxxx:1628::254 > 2001:xxxx:e334::254:
ESP(spi=0x07454bc3,seq=0x28e), length 132
12:00:06.296623 IP6 2001:xxxx:1628::254 > 2001:xxxx:e334::254:
ESP(spi=0x07454bc3,seq=0x28f), length 132

I have posted to the ipsec-devel list and haven't gotten any responses. Also
I
have spent 2 days googling with
no results about the above setup. Is it even possible to tunnel ipv4 packet thru
an ipv6 ipsec tunnel?

Thanks,
Steve

-- 

"They that give up essential liberty to obtain temporary safety,
deserve neither liberty nor safety."  (Ben Franklin)

"The course of history shows that as a government grows, liberty
decreases."  (Thomas Jefferson)

> I have posted to the ipsec-devel list and haven't gotten any responses.
Also I
> have spent 2 days googling with
> no results about the above setup. Is it even possible to tunnel ipv4 packet
thru
> an ipv6 ipsec tunnel?
AFAIK, No.

IPv4 & IPv6 are different protocols so if you want to move IPv6
traffic over a IPv4 IPSEC tunnel you need to encapsulate the IPv6
payload within IPv4 packets. The reverse is also true of IPv4 over
IPv6.

This is why tunnel brokers like Freenet6 & Teredo exist, you can't
push IPv6 traffic out across an IPv4 only network without tunneling.


-- 
Drew

"Nothing in life is to be feared. It is only to be understood."
--Marie Curie