VPN, Cisco AnyConnect, IPv6 notes

Fall of 2018 the VPN will support IPv6. This page explains what that means and how IPv6 traffic is handled in the different profiles.


Tunnel All will tunnel both IPv4 and IPv6 traffic back to campus.  All traffic, for all destinations.  Even if your Internet Service provider (ISP) does not support IPv6, you will be able to use IPv6 through the connection to campus, as long as it is enabled on your computer.

Split Tunnel and Split Tunnel_No Private IP will work in different ways depending on what services your ISP provides.  The IPv4 and IPv6 space considered "campus traffic" is everything on the Guide to University of Illinois IP Spaces page listed under Champaign-Urbana services.

If your ISP has both IPv4 and IPv6 turned on for your network, then traffic for both IPv4 and IPv6 will be split, with campus traffic going to the VPN, and other traffic going over your ISP connection. 

If your ISP has only IPv4 turned on for your network then traffic for IPv4 will be split,  with campus IPv4 traffic going to the VPN, and other IPv4 traffic going over your ISP connection.  All IPv6 traffic will be tunneled to campus, similar to Tunnel All, but just for your IPv6 traffic.

A number of services like Facebook, Netflix, and others use IPv6 by default. In this case your traffic to those services will start going over IPv6 to the VPN instead of via your ISP.  To keep this from happening either your ISP needs to enable IPv6, or you need to disable IPv6 on your computer.

If your ISP has only IPv6 turned on for your network then traffic for IPv6 will be split,  with campus IPv6 traffic going to the VPN, and other IPv6 traffic going over your ISP connection.  All IPv4 traffic for campus IPv4 addresses will go over the VPN.  IPv4 traffic to other addresses will be handled by your ISP however it normally handles IPv4 traffic on an IPv6 only network.

Not sure if your ISP is providing you IPv4, IPv6 or both? Before you connect to the VPN, go to  https://www.whatismyip.com and see what IP address(es) 
you have.  You can do it again after you connect to the VPN to be sure you got an IPv6 address. 



Keywords:VPN Profiles cisco anyconnect split tunnel, tunnel all, duo, IPv6 IPv4   Doc ID:84548
Owner:Debbie F.Group:University of Illinois Technology Services
Created:2018-08-07 11:46 CDTUpdated:2018-08-21 09:04 CDT
Sites:University of Illinois Technology Services
Feedback:  4   4