pfSense

The connect button on the IPsec status page tries to determine a source IP on the firewall from which to send a ping to a host in the target phase 2 network. Currently for an IPv6 tunnel it's suggesting an IPv4 source, which of course will not work.

The functions it currently uses -- find_ip_interface() and find_virtual_ip_alias() -- only work for IPv4. We will probably need to make ipv6 variants of those existing functions. And then adjust the code on the IPsec status page to account for which function to use based on which mode the phase 2 is, either tunnel or tunnel6.